5.3

CVE-2017-5418

Exploit
An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information leakage through the reading of random memory containing matches to specifically set patterns. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version < 52.0
Mozilla ≫ Thunderbird Version < 52.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.28% 0.662
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://www.securitytracker.com/id/1037966
Third Party Advisory
VDB Entry
https://www.mozilla.org/security/advisories/mfsa2017-05/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2017-09/
Vendor Advisory
http://www.securityfocus.com/bid/96692
Third Party Advisory
VDB Entry
https://bugzilla.mozilla.org/show_bug.cgi?id=1338876
Patch
Vendor Advisory
Exploit
Issue Tracking