CVE-2017-7828

Mozilla: Use-after-free of PressShell while restyling layout (MFSA 2017-25)

Published Jun 11, 2018 CVSS 3.0 · 9.8 Critical EPSS 7.2% KEV · Not listed
Description
A use-after-free vulnerability can occur when flushing and resizing layout because the "PressShell" object has been freed while still in use. This results in a potentially exploitable crash during these operations. This vulnerability affects Firefox < 57, Firefox ESR < 52.5, and Thunderbird < 52.5.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-1172-1 firefox-esr security update
Debian DLA Debian DLA DLA-1199-1 thunderbird security update
Debian DSA Debian DSA DSA-4035-1 firefox-esr security update
Debian DSA Debian DSA DSA-4061-1 thunderbird security update
Debian DSA Debian DSA DSA-4075-1 thunderbird security update
Ubuntu USN Ubuntu USN USN-3477-1 Firefox vulnerabilities
Ubuntu USN Ubuntu USN USN-3490-1 Thunderbird vulnerabilities
History
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Vendors & Products Mozilla firefox Esr