PT-2017-3989

CVE-2017-7828

·

Published

2017-10-27

·

Updated

2024-12-12

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 57 Firefox ESR versions prior to 52.5 Thunderbird versions prior to 52.5
Description A use-after-free issue occurs due to the PressShell object being freed while still in use, potentially leading to a crash during flushing and resizing layout operations. This can result in a denial of service.
Recommendations For Firefox versions prior to 57, update to version 57 or later. For Firefox ESR versions prior to 52.5, update to version 52.5 or later. For Thunderbird versions prior to 52.5, update to version 52.5 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2017-2652
ALT-PU-2017-2703
ALT-PU-2017-2739
ALT-PU-2018-1854
CESA-2017_3247
CESA-2017_3372
DLA-1172-1
DLA-1199-1
DSA-4035-1
DSA-4061-1
DSA-4075-1
MGASA-2017-0418
MGASA-2017-0432
MGASA-2018-0018
OPENSUSE-SU-2017_3027-1
OPENSUSE-SU-2017:3108-1
OPENSUSE-SU-2017:3110-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:10601-1
OPENSUSE-SU-2024:14572-1
RHSA-2017:3247
RHSA-2017_3247
RHSA-2017:3372
RHSA-2017_3372
SUSE-SU-2017:3213-1
SUSE-SU-2017:3233-1
USN-3477-1
USN-3477-2
USN-3477-3
USN-3477-4
USN-3490-1
Found an issue in the description? Have something to add? Feel free to write us 👾