Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-5455

Опубликовано: 11 июн. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 5
CVSS3: 7.5

Описание

The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

РелизСтатусПримечание
devel

released

54.0+build3-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [53.0+build6-0ubuntu0.14.04.1]]
precise

ignored

precise/esm

DNE

precise was ignored
trusty

released

53.0+build6-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [53.0+build6-0ubuntu0.14.04.1]
upstream

released

53.0
vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

released

53.0+build6-0ubuntu0.16.04.1

Показывать по

РелизСтатусПримечание
devel

not-affected

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected]
precise

ignored

end of life
precise/esm

DNE

precise was needs-triage
trusty

not-affected

trusty/esm

DNE

trusty was not-affected
upstream

not-affected

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

xenial

not-affected

Показывать по

EPSS

Процентиль: 84%
0.02349
Низкий

5 Medium

CVSS2

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
больше 8 лет назад

The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

CVSS3: 7.5
nvd
около 7 лет назад

The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

CVSS3: 7.5
debian
около 7 лет назад

The internal feed reader APIs that crossed the sandbox barrier allowed ...

CVSS3: 7.5
github
около 3 лет назад

The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

oracle-oval
больше 8 лет назад

ELSA-2017-1106: firefox security update (CRITICAL)

EPSS

Процентиль: 84%
0.02349
Низкий

5 Medium

CVSS2

7.5 High

CVSS3