Описание
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 55.0.2+build1-0ubuntu4 |
| bionic | released | 55.0.2+build1-0ubuntu4 |
| cosmic | released | 55.0.2+build1-0ubuntu4 |
| devel | released | 55.0.2+build1-0ubuntu4 |
| disco | released | 55.0.2+build1-0ubuntu4 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [55.0.1+build2-0ubuntu0.14.04.2]] |
| precise/esm | DNE | |
| trusty | released | 55.0.1+build2-0ubuntu0.14.04.2 |
| trusty/esm | DNE | trusty was released [55.0.1+build2-0ubuntu0.14.04.2] |
| upstream | released | 55.0 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | code not present |
| cosmic | DNE | |
| devel | DNE | |
| disco | DNE | |
| esm-apps/bionic | not-affected | code not present |
| esm-infra-legacy/trusty | DNE | |
| precise/esm | DNE | |
| trusty | DNE | |
| trusty/esm | DNE |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| artful | released | 1:52.4.0+build1-0ubuntu2 |
| bionic | released | 1:52.4.0+build1-0ubuntu2 |
| cosmic | released | 1:52.4.0+build1-0ubuntu2 |
| devel | released | 1:52.4.0+build1-0ubuntu2 |
| disco | released | 1:52.4.0+build1-0ubuntu2 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [1:52.3.0+build1-0ubuntu0.14.04.1]] |
| precise/esm | DNE | |
| trusty | released | 1:52.3.0+build1-0ubuntu0.14.04.1 |
| trusty/esm | DNE | trusty was released [1:52.3.0+build1-0ubuntu0.14.04.1] |
| upstream | released | 52.3.0 |
Показывать по
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
A use-after-free vulnerability can occur when manipulating the DOM dur ...
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
Уязвимость функции mozilla::dom::ImageDocument::UpdateSizeFromLayout браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3