CVE-2017-5411
published 2018-06-11CVE-2017-5411: A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. The buffer storage can be freed while…
PriorityP336high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
1.78%
75.8th percentile
A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. The buffer storage can be freed while still in use in some circumstances, leading to a potentially exploitable crash. Note: This issue is in "libGLES", which is only in use on Windows. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 52.0 | 52.0 |
| mozilla | firefox | >= unspecified < 52 | 52 |
| mozilla | thunderbird | < 52.0 | 52.0 |
| mozilla | thunderbird | >= unspecified < 52 | 52 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_debian7.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2017-5411: firefox - A use-after-free can occur during buffer storage operations within the ANGLE gra...
vendor_debian·2017·CVSS 7.5
CVE-2017-5411 [HIGH] CVE-2017-5411: firefox - A use-after-free can occur during buffer storage operations within the ANGLE gra...
A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. The buffer storage can be freed while still in use in some circumstances, leading to a potentially exploitable crash. Note: This issue is in "libGLES", which is only in use on Windows. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Scope: local
sid: resolved
GHSA
GHSA-2rmc-2qhr-4jvg: A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content
ghsa_unreviewed·2022-05-14
CVE-2017-5411 [HIGH] CWE-416 GHSA-2rmc-2qhr-4jvg: A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content
A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. The buffer storage can be freed while still in use in some circumstances, leading to a potentially exploitable crash. Note: This issue is in "libGLES", which is only in use on Windows. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/96692http://www.securitytracker.com/id/1037966https://bugzilla.mozilla.org/show_bug.cgi?id=1325511https://www.mozilla.org/security/advisories/mfsa2017-05/https://www.mozilla.org/security/advisories/mfsa2017-09/http://www.securityfocus.com/bid/96692http://www.securitytracker.com/id/1037966https://bugzilla.mozilla.org/show_bug.cgi?id=1325511https://www.mozilla.org/security/advisories/mfsa2017-05/https://www.mozilla.org/security/advisories/mfsa2017-09/
2018-06-11
Published