CVE-2017-1104
published 2017-06-13CVE-2017-1104: IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the…
PriorityP423medium5.4CVSS 3.0
AVNACLPRLUIRSCCLILAN
EPSS
0.75%
50.7th percentile
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120666.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
| ibm | rational_quality_manager | — | — |
CVSS provenance
nvdv3.05.4MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
nvdv2.03.5LOWAV:N/AC:M/Au:S/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Razer Synapse 2.20.15.1104 - rzpnk.sys ZwOpenProcess (Metasploit)
exploitdb·2017-07-24
CVE-2017-9769 Razer Synapse 2.20.15.1104 - rzpnk.sys ZwOpenProcess (Metasploit)
Razer Synapse 2.20.15.1104 - rzpnk.sys ZwOpenProcess (Metasploit)
---
##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
require 'msf/core/exploit/local/windows_kernel'
require 'rex'
require 'metasm'
class MetasploitModule 'Razer Synapse rzpnk.sys ZwOpenProcess',
'Description' => %q{
A vulnerability exists in the latest version of Razer Synapse
(v2.20.15.1104 as of the day of disclosure) which can be leveraged
locally by a malicious application to elevate its privileges to those of
NT_AUTHORITY\SYSTEM. The vulnerability lies in a specific IOCTL handler
in the rzpnk.sys driver that passes a PID specified by the user to
ZwOpenProcess. This can be issued by an application to open a handle to
an arbitrar
Exploit-DB
Apple macOS Kernel 10.12.3 (16D32) - Use-After-Free Due to Double-Release in posix_spawn
exploitdb·2017-04-04
CVE-2017-2472 Apple macOS Kernel 10.12.3 (16D32) - Use-After-Free Due to Double-Release in posix_spawn
Apple macOS Kernel 10.12.3 (16D32) - Use-After-Free Due to Double-Release in posix_spawn
---
/*
Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1104
exec_handle_port_actions is responsible for handling the xnu port actions extension to posix_spawn.
It supports 4 different types of port (PSPA_SPECIAL, PSPA_EXCEPTION, PSPA_AU_SESSION and PSPA_IMP_WATCHPORTS)
For the special, exception and audit ports it tries to update the new task to reflect the port action
by calling either task_set_special_port, task_set_exception_ports or audit_session_spawnjoin and if
any of those calls fail it calls ipc_port_release_send(port).
task_set_special_port and task_set_exception_ports don't drop a reference on the port if they fail
but audit_session_spawnjoin (which calls to audit_sess
Bugzilla
CVE-2017-5446 Mozilla: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5446 [CRITICAL] CVE-2017-5446 Mozilla: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5446 Mozilla: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data (MFSA 2017-11, MFSA 2017-12)
An out-of-bounds read when an HTTP/2 connection to a servers sends DATA frames with incorrect data content. This leads to a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5446
Acknowledgements:
Name: the Mozilla project
Upstream: Chun Han Hsiao
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has b
Bugzilla
CVE-2017-5465 Mozilla: Out-of-bounds read in ConvolvePixel (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.1
CVE-2017-5465 [CRITICAL] CVE-2017-5465 Mozilla: Out-of-bounds read in ConvolvePixel (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5465 Mozilla: Out-of-bounds read in ConvolvePixel (MFSA 2017-11, MFSA 2017-12)
An out-of-bounds read while processing SVG content in ConvolvePixel. This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5465
Acknowledgements:
Name: the Mozilla project
Upstream: Ivan Fratric (Google Project Zero)
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errat
Bugzilla
CVE-2017-5445 Mozilla: Uninitialized values used while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 7.5
CVE-2017-5445 [HIGH] CVE-2017-5445 Mozilla: Uninitialized values used while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5445 Mozilla: Uninitialized values used while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)
A vulnerability while parsing application/http-index-format format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5445
Acknowledgements:
Name: the Mozilla project
Upstream: Chamal De Silva
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://
Bugzilla
CVE-2017-5443 Mozilla: Out-of-bounds write during BinHex decoding (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5443 [CRITICAL] CVE-2017-5443 Mozilla: Out-of-bounds write during BinHex decoding (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5443 Mozilla: Out-of-bounds write during BinHex decoding (MFSA 2017-11, MFSA 2017-12)
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5443
Acknowledgements:
Name: the Mozilla project
Upstream: Chamal De Silva
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Red Hat Enterprise L
Bugzilla
CVE-2017-5441 Mozilla: Use-after-free with selection during scroll events (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5441 [CRITICAL] CVE-2017-5441 Mozilla: Use-after-free with selection during scroll events (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5441 Mozilla: Use-after-free with selection during scroll events (MFSA 2017-11, MFSA 2017-12)
A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5441
Acknowledgements:
Name: the Mozilla project
Upstream: Nils
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has been addressed in the following products:
Red Hat Enterpris
Bugzilla
CVE-2017-5433 Mozilla: Use-after-free in SMIL animation functions (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5433 [CRITICAL] CVE-2017-5433 Mozilla: Use-after-free in SMIL animation functions (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5433 Mozilla: Use-after-free in SMIL animation functions (MFSA 2017-11, MFSA 2017-12)
A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5433
Acknowledgements:
Name: the Mozilla project
Upstream: Nils
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2
Bugzilla
CVE-2017-5432 Mozilla: Use-after-free in text input selection (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5432 [CRITICAL] CVE-2017-5432 Mozilla: Use-after-free in text input selection (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5432 Mozilla: Use-after-free in text input selection (MFSA 2017-11, MFSA 2017-12)
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5432
Acknowledgements:
Name: the Mozilla project
Upstream: Nils
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Red Hat E
Bugzilla
CVE-2017-5448 Mozilla: Out-of-bounds write in ClearKeyDecryptor (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 8.6
CVE-2017-5448 [HIGH] CVE-2017-5448 Mozilla: Out-of-bounds write in ClearKeyDecryptor (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5448 Mozilla: Out-of-bounds write in ClearKeyDecryptor (MFSA 2017-11, MFSA 2017-12)
An out-of-bounds write in ClearKeyDecryptor while decrypting some Clearkey-encrypted media content. This allows for the writing of arbitrary data within memory, resulting in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5448
Acknowledgements:
Name: the Mozilla project
Upstream: Anonymous working with Trend Micro's Zero Day Initiative
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://
Bugzilla
CVE-2017-5436 Mozilla: Out-of-bounds write with malicious font in Graphite 2 (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 8.8
CVE-2017-5436 [HIGH] CVE-2017-5436 Mozilla: Out-of-bounds write with malicious font in Graphite 2 (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5436 Mozilla: Out-of-bounds write with malicious font in Graphite 2 (MFSA 2017-11, MFSA 2017-12)
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5436
Acknowledgements:
Name: the Mozilla project
Upstream: Holger Fuhrmannek
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access
Bugzilla
CVE-2017-5459 Mozilla: Buffer overflow in WebGL (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5459 [CRITICAL] CVE-2017-5459 Mozilla: Buffer overflow in WebGL (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5459 Mozilla: Buffer overflow in WebGL (MFSA 2017-11, MFSA 2017-12)
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5459
Acknowledgements:
Name: the Mozilla project
Upstream: Atte Kettunen
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Via R
Bugzilla
CVE-2017-5442 Mozilla: Use-after-free during style changes (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5442 [CRITICAL] CVE-2017-5442 Mozilla: Use-after-free during style changes (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5442 Mozilla: Use-after-free during style changes (MFSA 2017-11, MFSA 2017-12)
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5442
Acknowledgements:
Name: the Mozilla project
Upstream: Nils
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has been addressed in the following products:
Red Hat Enterprise Linu
Bugzilla
CVE-2017-5469 Mozilla: Potential Buffer overflow in flex-generated code (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5469 [CRITICAL] CVE-2017-5469 Mozilla: Potential Buffer overflow in flex-generated code (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5469 Mozilla: Potential Buffer overflow in flex-generated code (MFSA 2017-11, MFSA 2017-12)
Fixed potential buffer overflows in generated Firefox code due to [CVE-2016-6354](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6354) issue in Flex.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5469
Acknowledgements:
Name: the Mozilla project
Upstream: Petr Cerny
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has been addressed in the fol
Bugzilla
CVE-2017-5439 Mozilla: Use-after-free in nsTArray Length() during XSLT processing (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5439 [CRITICAL] CVE-2017-5439 Mozilla: Use-after-free in nsTArray Length() during XSLT processing (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5439 Mozilla: Use-after-free in nsTArray Length() during XSLT processing (MFSA 2017-11, MFSA 2017-12)
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5439
Acknowledgements:
Name: the Mozilla project
Upstream: Nicolas Grégoire
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has been addressed in t
Bugzilla
CVE-2017-5434 Mozilla: Use-after-free during focus handling (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5434 [CRITICAL] CVE-2017-5434 Mozilla: Use-after-free during focus handling (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5434 Mozilla: Use-after-free during focus handling (MFSA 2017-11, MFSA 2017-12)
A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5434
Acknowledgements:
Name: the Mozilla project
Upstream: Nils
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Red Hat Ente
Bugzilla
CVE-2017-5438 Mozilla: Use-after-free in nsAutoPtr during XSLT processing (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5438 [CRITICAL] CVE-2017-5438 Mozilla: Use-after-free in nsAutoPtr during XSLT processing (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5438 Mozilla: Use-after-free in nsAutoPtr during XSLT processing (MFSA 2017-11, MFSA 2017-12)
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5438
Acknowledgements:
Name: the Mozilla project
Upstream: Nicolas Grégoire
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has
Bugzilla
CVE-2017-5464 Mozilla: Memory corruption with accessibility and DOM manipulation (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5464 [CRITICAL] CVE-2017-5464 Mozilla: Memory corruption with accessibility and DOM manipulation (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5464 Mozilla: Memory corruption with accessibility and DOM manipulation (MFSA 2017-11, MFSA 2017-12)
During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5464
Acknowledgements:
Name: the Mozilla project
Upstream: Nils
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
Bugzilla
CVE-2017-5435 Mozilla: Use-after-free during transaction processing in the editor (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5435 [CRITICAL] CVE-2017-5435 Mozilla: Use-after-free during transaction processing in the editor (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5435 Mozilla: Use-after-free during transaction processing in the editor (MFSA 2017-11, MFSA 2017-12)
A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5435
Acknowledgements:
Name: the Mozilla project
Upstream: Nils
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has been addressed i
Bugzilla
CVE-2017-5447 Mozilla: Out-of-bounds read during glyph processing (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.1
CVE-2017-5447 [CRITICAL] CVE-2017-5447 Mozilla: Out-of-bounds read during glyph processing (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5447 Mozilla: Out-of-bounds read during glyph processing (MFSA 2017-11, MFSA 2017-12)
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5447
Acknowledgements:
Name: the Mozilla project
Upstream: Ivan Fratric (Google Project Zero)
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2
Bugzilla
CVE-2017-5460 Mozilla: Use-after-free in frame selection (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5460 [CRITICAL] CVE-2017-5460 Mozilla: Use-after-free in frame selection (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5460 Mozilla: Use-after-free in frame selection (MFSA 2017-11, MFSA 2017-12)
A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5460
Acknowledgements:
Name: the Mozilla project
Upstream: Nils
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has been addressed in the f
Bugzilla
CVE-2017-5449 Mozilla: Crash during bidirectional unicode manipulation with animation (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 7.5
CVE-2017-5449 [HIGH] CVE-2017-5449 Mozilla: Crash during bidirectional unicode manipulation with animation (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5449 Mozilla: Crash during bidirectional unicode manipulation with animation (MFSA 2017-11, MFSA 2017-12)
A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5449
Acknowledgements:
Name: the Mozilla project
Upstream: Nils
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
---
This issue has been addressed in the following products:
Bugzilla
CVE-2017-5440 Mozilla: Use-after-free in txExecutionState destructor during XSLT processing (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 9.8
CVE-2017-5440 [CRITICAL] CVE-2017-5440 Mozilla: Use-after-free in txExecutionState destructor during XSLT processing (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5440 Mozilla: Use-after-free in txExecutionState destructor during XSLT processing (MFSA 2017-11, MFSA 2017-12)
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5440
Acknowledgements:
Name: the Mozilla project
Upstream: Nicolas Grégoire
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux
Bugzilla
CVE-2017-5444 Mozilla: Buffer overflow while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)
bugzilla·2017-04-19·CVSS 7.5
CVE-2017-5444 [HIGH] CVE-2017-5444 Mozilla: Buffer overflow while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)
CVE-2017-5444 Mozilla: Buffer overflow while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)
A buffer overflow vulnerability while parsing application/http-index-format format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5444
Acknowledgements:
Name: the Mozilla project
Upstream: Chamal De Silva
Discussion:
This issue has been addressed in the following products:
Red Hat Enterprise Linux 6
Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
---
This issue has been addressed in the following products:
Red Hat Enterprise Linux 7
Via RHSA-2017:1106 https://access.redhat.com/
http://www.ibm.com/support/docview.wss?uid=swg22004428http://www.securityfocus.com/bid/99004http://www.securitytracker.com/id/1038698https://exchange.xforce.ibmcloud.com/vulnerabilities/120666http://www.ibm.com/support/docview.wss?uid=swg22004428http://www.securityfocus.com/bid/99004http://www.securitytracker.com/id/1038698https://exchange.xforce.ibmcloud.com/vulnerabilities/120666
2017-06-13
Published