PT-2017-16512

CVE-2017-5455

·

Published

2017-04-19

·

Updated

2024-12-12

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 52.1 Firefox versions prior to 53
Description The issue allows for a sandbox escape and escalation of privilege when combined with another vulnerability that results in remote code execution inside the sandboxed process. This is due to the internal feed reader APIs crossing the sandbox barrier.
Recommendations For Firefox ESR versions prior to 52.1, update to version 52.1 or later. For Firefox versions prior to 53, update to version 53 or later.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2017-1577
ALT-PU-2017-1578
ALT-PU-2018-1854
CESA-2017_1106
MGASA-2018-0018
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
RHSA-2017:1106
RHSA-2017_1106
SUSE-SU-2017:1669-1
SUSE-SU-2017:2235-1
USN-3260-1
USN-3260-2
Found an issue in the description? Have something to add? Feel free to write us 👾