Skip to content
OpenAdvisories
Unscored CVE-2017-5399 EUVD-2017-14503GHSA-6j9r-8v43-253q

Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough eff…

Published Jun 11, 2018 · Updated Aug 5, 2024 · Assigned by mozilla

Vendor: Mozilla Product: Firefox Product: Thunderbird Package: firefox Category: Browsers Ecosystem: Ubuntu

Description

Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 52 and Thunderbird < 52.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 52 52
Mozilla Thunderbird unspecified – < 52 52

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS firefox 52.0+build2-0ubuntu0.16.04.1 USN-3216-1
Ubuntu 14.04 LTS firefox 52.0+build2-0ubuntu0.14.04.1 USN-3216-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE Package Hub 12 MozillaThunderbird 52.1.0-30.1 openSUSE-SU-2017:1268-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 92.0-1.2 openSUSE-SU-2024:10600-1
openSUSE Tumbleweed MozillaThunderbird 91.1.1-1.1 openSUSE-SU-2024:10601-1
openSUSE Tumbleweed firefox-esr 128.5.1-1.1 openSUSE-SU-2024:14572-1

Advisories 5

References