Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-7818

Опубликовано: 11 июн. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5
CVSS3: 9.8

Описание

A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.

РелизСтатусПримечание
artful

released

56.0+build6-0ubuntu1
bionic

released

56.0+build6-0ubuntu1
devel

released

56.0+build6-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [56.0+build6-0ubuntu0.14.04.1]]
precise/esm

DNE

trusty

released

56.0+build6-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [56.0+build6-0ubuntu0.14.04.1]
upstream

released

56.0
vivid/ubuntu-core

DNE

xenial

released

56.0+build6-0ubuntu0.16.04.1

Показывать по

РелизСтатусПримечание
artful

released

1:52.4.0+build1-0ubuntu2
bionic

released

1:52.4.0+build1-0ubuntu2
devel

released

1:52.4.0+build1-0ubuntu2
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1:52.4.0+build1-0ubuntu0.14.04.2]]
precise/esm

DNE

trusty

released

1:52.4.0+build1-0ubuntu0.14.04.2
trusty/esm

DNE

trusty was released [1:52.4.0+build1-0ubuntu0.14.04.2]
upstream

released

52.4.0
vivid/ubuntu-core

DNE

xenial

released

1:52.4.0+build1-0ubuntu0.16.04.2

Показывать по

EPSS

Процентиль: 92%
0.09
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
redhat
почти 8 лет назад

A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.

CVSS3: 9.8
nvd
около 7 лет назад

A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.

CVSS3: 9.8
debian
около 7 лет назад

A use-after-free vulnerability can occur when manipulating arrays of A ...

CVSS3: 9.8
github
около 3 лет назад

A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.

CVSS3: 7.5
fstec
около 8 лет назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с использованием памяти после освобождения, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 92%
0.09
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3