CVE-2017-5403
published 2018-06-11CVE-2017-5403: When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free…
PriorityP341critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
1.72%
74.7th percentile
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | < firefox 52.0-1 (sid) | firefox 52.0-1 (sid) |
| mozilla | firefox | < 52.0 | 52.0 |
| mozilla | firefox | >= 0 < 52.0+build2-0ubuntu0.14.04.1 | 52.0+build2-0ubuntu0.14.04.1 |
| mozilla | firefox | >= 0 < 52.0.2+build1-0ubuntu0.14.04.1 | 52.0.2+build1-0ubuntu0.14.04.1 |
| mozilla | firefox | >= 0 < 52.0+build2-0ubuntu0.16.04.1 | 52.0+build2-0ubuntu0.16.04.1 |
| mozilla | firefox | >= 0 < 52.0.2+build1-0ubuntu0.16.04.1 | 52.0.2+build1-0ubuntu0.16.04.1 |
| mozilla | firefox | >= unspecified < 52 | 52 |
| mozilla | thunderbird | < 52.0 | 52.0 |
| mozilla | thunderbird | >= unspecified < 52 | 52 |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_ubuntu9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qqx4-4522-hc7j: When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object
ghsa_unreviewed·2022-05-14
CVE-2017-5403 [CRITICAL] CWE-416 GHSA-qqx4-4522-hc7j: When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 52 and Thunderbird < 52.
OSV
firefox regression
osv·2017-03-30·CVSS 9.8
[CRITICAL] firefox regression
firefox regression
USN-3216-1 fixed vulnerabilities in Firefox. The update resulted in a
startup crash when Firefox is used with XRDP. This update fixes the
problem.
We apologize for the inconvenience.
Original advisory details:
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to bypass same origin restrictions, obtain
sensitive information, spoof the addressbar, spoof the print dialog,
cause a denial of service via application crash or hang, or execute
arbitrary code. (CVE-2017-5398, CVE-2017-5399, CVE-2017-5400,
CVE-2017-5401, CVE-2017-5402, CVE-2017-5403, CVE-2017-5404, CVE-2017-5405,
CVE-2017-5406, CVE-2017-5407, CVE-2017-5408, CVE-2017-5410, CVE-2017-5412,
CVE-2017-541
OSV
firefox vulnerabilities
osv·2017-03-07·CVSS 9.8
CVE-2017-5398 [CRITICAL] firefox vulnerabilities
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to bypass same origin restrictions, obtain
sensitive information, spoof the addressbar, spoof the print dialog,
cause a denial of service via application crash or hang, or execute
arbitrary code. (CVE-2017-5398, CVE-2017-5399, CVE-2017-5400,
CVE-2017-5401, CVE-2017-5402, CVE-2017-5403, CVE-2017-5404, CVE-2017-5405,
CVE-2017-5406, CVE-2017-5407, CVE-2017-5408, CVE-2017-5410, CVE-2017-5412,
CVE-2017-5413, CVE-2017-5414, CVE-2017-5415, CVE-2017-5416, CVE-2017-5417,
CVE-2017-5418, CVE-2017-5419, CVE-2017-5420, CVE-2017-5421, CVE-2017-5422,
CVE-2017-5426, CVE-2017-5427)
OSV
CVE-2017-5403: When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object
osv·2017-03-07·CVSS 9.8
CVE-2017-5403 [CRITICAL] CVE-2017-5403: When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Ubuntu
Firefox regression
vendor_ubuntu·2017-03-30·CVSS 9.8
[CRITICAL] Firefox regression
Title: Firefox regression
Summary: USN-3216-1 introduced a regression in Firefox.
USN-3216-1 fixed vulnerabilities in Firefox. The update resulted in a
startup crash when Firefox is used with XRDP. This update fixes the
problem.
We apologize for the inconvenience.
Original advisory details:
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to bypass same origin restrictions, obtain
sensitive information, spoof the addressbar, spoof the print dialog,
cause a denial of service via application crash or hang, or execute
arbitrary code. (CVE-2017-5398, CVE-2017-5399, CVE-2017-5400,
CVE-2017-5401, CVE-2017-5402, CVE-2017-5403, CVE-2017-5404, CVE-2017-5405,
CVE-2017-5406, CVE-2017
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2017-03-07·CVSS 9.8
CVE-2017-5398 [CRITICAL] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Firefox could be made to crash or run programs as your login if it
opened a malicious website.
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to bypass same origin restrictions, obtain
sensitive information, spoof the addressbar, spoof the print dialog,
cause a denial of service via application crash or hang, or execute
arbitrary code. (CVE-2017-5398, CVE-2017-5399, CVE-2017-5400,
CVE-2017-5401, CVE-2017-5402, CVE-2017-5403, CVE-2017-5404, CVE-2017-5405,
CVE-2017-5406, CVE-2017-5407, CVE-2017-5408, CVE-2017-5410, CVE-2017-5412,
CVE-2017-5413, CVE-2017-5414, CVE-2017-5415, CVE-2017-5416, CVE-2017-5417,
CVE-2017-5418, CVE-2017-5419, CVE
Debian
CVE-2017-5403: firefox - When adding a range to an object in the DOM, it is possible to use "addRange" to...
vendor_debian·2017·CVSS 9.8
CVE-2017-5403 [CRITICAL] CVE-2017-5403: firefox - When adding a range to an object in the DOM, it is possible to use "addRange" to...
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Scope: local
sid: resolved (fixed in 52.0-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/96691http://www.securitytracker.com/id/1037966https://bugzilla.mozilla.org/show_bug.cgi?id=1340186https://www.mozilla.org/security/advisories/mfsa2017-05/https://www.mozilla.org/security/advisories/mfsa2017-09/http://www.securityfocus.com/bid/96691http://www.securitytracker.com/id/1037966https://bugzilla.mozilla.org/show_bug.cgi?id=1340186https://www.mozilla.org/security/advisories/mfsa2017-05/https://www.mozilla.org/security/advisories/mfsa2017-09/
2018-06-11
Published