Security vulnerabilities fixed in Firefox 57.0.2

Related Vulnerabilities: CVE-2017-7845  

Mozilla Foundation Security Advisory 2017-29

Security vulnerabilities fixed in Firefox 57.0.2

Announced
December 7, 2017
Impact
critical
Products
Firefox
Fixed in
  • Firefox 57.0.2

#CVE-2017-7845: Buffer overflow when drawing and validating elements with ANGLE library using Direct 3D 9

Reporter
Omair
Impact
critical
Description

A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash.
Note: This attack only affects Windows operating systems. Other operating systems are unaffected.

References