Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-5400

Опубликовано: 07 мар. 2017
Источник: redhat
CVSS3: 9.8
CVSS2: 6.8
EPSS Низкий

Описание

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

Дополнительная информация

Статус:

Critical
https://bugzilla.redhat.com/show_bug.cgi?id=1429778Mozilla: asm.js JIT-spray bypass of ASLR and DEP (MFSA 2017-06)

EPSS

Процентиль: 68%
0.00573
Низкий

9.8 Critical

CVSS3

6.8 Medium

CVSS2

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 7 лет назад

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

CVSS3: 9.8
nvd
больше 7 лет назад

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

CVSS3: 9.8
debian
больше 7 лет назад

JIT-spray targeting asm.js combined with a heap spray allows for a byp ...

CVSS3: 9.8
github
больше 3 лет назад

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

oracle-oval
больше 8 лет назад

ELSA-2017-0498: thunderbird security update (IMPORTANT)

EPSS

Процентиль: 68%
0.00573
Низкий

9.8 Critical

CVSS3

6.8 Medium

CVSS2