9.8
CVSSv3

CVE-2017-7757

Published: 11/06/2018 Updated: 08/08/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox esr

mozilla thunderbird

mozilla firefox

debian debian linux 8.0

debian debian linux 9.0

Vendor Advisories

Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Topic An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerab ...
Synopsis Critical: firefox security update Type/Severity Security Advisory: Critical Topic An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Critical A Common Vulnerability Scori ...
Several security issues were fixed in Thunderbird ...
Firefox could be made to crash or run programs as your login if it opened a malicious website ...
Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service Debian follows the extended support releases (ESR) of Thunderbird Support for the 45x series has ended, so starting with this update we're now following the 52x releases For the oldstable distribution (jessie), these ...
A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed This results in a potentially exploitable crash This vulnerability affects Firefox &lt; 54, Firefox ESR &lt; 522, and Thunderbird &lt; 522 ...
A use after-free vulnerability has been found in Firefox &lt; 540 and Thunderbird &lt; 522, in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed ...
Mozilla Foundation Security Advisory 2017-16 Security vulnerabilities fixed in Firefox ESR 522 Announced June 13, 2017 Impact critical Products Firefox ESR Fixed in Firefox ESR 522 ...
Mozilla Foundation Security Advisory 2017-15 Security vulnerabilities fixed in Firefox 54 Announced June 13, 2017 Impact critical Products Firefox Fixed in Firefox 54 ...
Mozilla Foundation Security Advisory 2017-17 Security vulnerabilities fixed in Thunderbird 522 Announced June 14, 2017 Impact critical Products Thunderbird Fixed in Thunderbird 522 ...