Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-5419 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.280Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Repeated authentication prompts lead to DOS attack Description: If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become non-responsive, requiring shutdown through the operating system. This is a denial of service (DOS) attack. This vulnerability affects Firefox < 52 and Thunderbird < 52. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1312243 - https:/
ttps://www.mozilla.org/security/advisories/mfsa2017-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1312243 - https://www.mozilla.org/security/advisories/mfsa2017-05/ - http://www.securitytracker.com/id/1037966 - http://www.securityfocus.com/bid/96692
CVE ID: CVE-2017-5420 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:13.330Z Vendors: Mozilla Products: Firefox Problem Types: Javascript: URLs can obfuscate addressbar location Description: A "javascript:" url loaded by a malicious page can obfuscate its location by blanking the URL displayed in the addressbar, allowing for an attacker to spoof an existing page without the malicious page's address being displayed correctly. This vulnerability affects Firefox < 52. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-05/ - http://www.securitytracker.com/id/1037966 - https://bugzilla.mozilla.org/s
ozilla.org/security/advisories/mfsa2017-05/ - http://www.securitytracker.com/id/1037966 - https://bugzilla.mozilla.org/show_bug.cgi?id=1284395 - http://www.securityfocus.com/bid/96692
CVE ID: CVE-2017-5421 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:13.319Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Print preview spoofing Description: A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox < 52 and Thunderbird < 52. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1301876 - https://www.mozilla.org/security/advisories/mfsa2017-09/ - https://www.mozilla.org/security/advisories/mfsa2017-05/ - http://www.securitytracker.com
rity/advisories/mfsa2017-09/ - https://www.mozilla.org/security/advisories/mfsa2017-05/ - http://www.securitytracker.com/id/1037966 - http://www.securityfocus.com/bid/96692
CVE ID: CVE-2017-5422 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:13.337Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: DOS attack by using view-source: protocol repeatedly in one hyperlink Description: If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a non-exploitable browser crash when the hyperlink is selected. This was fixed by no longer making "view-source:" linkable. This vulnerability affects Firefox < 52 and Thunderbird < 52. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1295002 - https://www.mozilla.org/security
Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1295002 - https://www.mozilla.org/security/advisories/mfsa2017-09/ - https://www.mozilla.org/security/advisories/mfsa2017-05/ - http://www.securitytracker.com/id/1037966 - http://www.securityfocus.com/bid/96692
CVE ID: CVE-2017-5425 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:13.336Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Overly permissive Gecko Media Plugin sandbox regular expression access Description: The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. On OS OX, this matching allows access to some data in subdirectories of "/private/var" that could expose personal or temporary data. This has been updated to not allow access to "/private/var" and its subdirectories. Note: this issue only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thun
this issue only affects OS X. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2017-09/ - https://www.mozilla.org/security/advisories/mfsa2017-05/ - http://www.securitytracker.com/id/1037966 - https://bugzilla.mozilla.org/show_bug.cgi?id=1322716 - http://www.securityfocus.com/bid/96692
CVE ID: CVE-2017-5426 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.334Z Vendors: Mozilla Products: Firefox, Thunderbird Problem Types: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running Description: On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko Media Plugin sandbox is started, the sandbox fails to be applied and items that would run within the sandbox are run protected only by the running filter which is typically weak compared to the sandbox. Note: this issue only affects Linux. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52. Additi
ts Linux. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96694 - https://www.mozilla.org/security/advisories/mfsa2017-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1257361 - https://www.mozilla.org/security/advisories/mfsa2017-05/ - http://www.securitytracker.com/id/1037966
CVE ID: CVE-2017-5427 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:13.318Z Vendors: Mozilla Products: Firefox Problem Types: Non-existent chrome.manifest file loaded during startup Description: A non-existent chrome.manifest file will attempt to be loaded during startup from the primary installation directory. If a malicious user with local access puts chrome.manifest and other referenced files in this directory, they will be loaded and activated during startup. This could result in malicious software being added without consent or modification of referenced installed files. This vulnerability affects Firefox < 52. Additional Analyst Notes: - CVE Program Con
tion of referenced installed files. This vulnerability affects Firefox < 52. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1295542 - https://www.mozilla.org/security/advisories/mfsa2017-05/ - http://www.securitytracker.com/id/1037966 - http://www.securityfocus.com/bid/96692
CVE ID: CVE-2017-5428 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.368Z Vendors: Mozilla Products: Firefox ESR, Firefox Problem Types: integer overflow in createImageBitmap() Description: An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the "createImageBitmap" API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user's computer. This vulnerability affects Firefox ESR < 52.0.1 and Firefox < 52.0.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038060 -
< 52.0.1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038060 - https://bugzilla.mozilla.org/show_bug.cgi?id=1348168 - http://www.securityfocus.com/bid/96959 - http://rhn.redhat.com/errata/RHSA-2017-0558.html - https://www.mozilla.org/security/advisories/mfsa2017-08/
CVE ID: CVE-2017-5429 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.380Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, Firefox ESR 52.1, and Thunderbird 52.1 Description: Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Co
Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1343261%2C1350844%2C1341096%2C1342823%2C1348894%2C1348941%2C1349340%2C1352926%2C1353088%2C - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320
ity/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5430 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.623Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Memory safety bugs fixed in Firefox 53, Firefox ESR 52.1, Thunderbird 52.1 Description: Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA
and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1342101%2C1340482%2C1344686%2C1329796%2C1346419%2C1349621%2C1344081%2C1344305%2C1348143%2C1349719%2C1353476%2C1337418%2C1346140%2C1339722 - http://www.securitytracker.com/id/1038320
CVE ID: CVE-2017-5432 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.350Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Use-after-free in text input selection Description: A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1346654 - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://w
- https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5433 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.351Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Use-after-free in SMIL animation functions Description: A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mo
l Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://bugzilla.mozilla.org/show_bug.cgi?id=1347168 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5434 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.581Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Use-after-free during focus handling Description: A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1349946 - https://www
://www.mozilla.org/security/advisories/mfsa2017-12/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1349946 - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5435 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.382Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Use-after-free during transaction processing in the editor Description: A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ -
erences: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://bugzilla.mozilla.org/show_bug.cgi?id=1350683 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5436 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.420Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Out-of-bounds write with malicious font in Graphite 2 Description: An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - ht
3. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://security.gentoo.org/glsa/201706-25 - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://bugzilla.mozilla.org/show_bug.cgi?id=1345461 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5437 State: REJECTED Published: 2017-04-25T21:00:00 Last Updated: 2017-04-25T20:57:01 Description: No description available.
CVE ID: CVE-2017-5438 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.387Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Use-after-free in nsAutoPtr during XSLT processing Description: A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12
References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://bugzilla.mozilla.org/show_bug.cgi?id=1336828 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5439 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.287Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Use-after-free in nsTArray Length() during XSLT processing Description: A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1336830 - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.
://bugzilla.mozilla.org/show_bug.cgi?id=1336830 - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - http://www.securityfocus.com/bid/103053 - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5440 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.254Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Use-after-free in txExecutionState destructor during XSLT processing Description: A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access
9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://bugzilla.mozilla.org/show_bug.cgi?id=1336832 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5441 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.383Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Use-after-free with selection during scroll events Description: A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/m
HSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1343795 - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201
CVE ID: CVE-2017-5442 State: PUBLISHED Published: 2018-06-11T21:00:00 Last Updated: 2024-08-05T15:04:14.646Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Use-after-free during style changes Description: A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=1347979 - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12
i?id=1347979 - https://access.redhat.com/errata/RHSA-2017:1106 - https://www.mozilla.org/security/advisories/mfsa2017-12/ - https://www.mozilla.org/security/advisories/mfsa2017-11/ - https://www.mozilla.org/security/advisories/mfsa2017-10/ - http://www.securityfocus.com/bid/97940 - https://www.debian.org/security/2017/dsa-3831 - https://www.mozilla.org/security/advisories/mfsa2017-13/ - http://www.securitytracker.com/id/1038320 - https://access.redhat.com/errata/RHSA-2017:1104 - https://access.redhat.com/errata/RHSA-2017:1201