The vulnerability in the WebGL component of Firefox browsers, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

🗓️ 28 Dec 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

A WebGL overrun in Firefox browsers, ESR, and Thunderbird can cause remote service failures.

Reporter	Title	Published	Views	Family All 142
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM Storwize V7000 Unified	18 Jun 201800:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM SONAS.	18 Jun 201800:35	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 45.9.0-alt1	20 Apr 201700:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 52.1.0-alt1	2 May 201700:00	–	altlinux
FreeBSD	mozilla -- multiple vulnerabilities	19 Apr 201700:00	–	freebsd
Tenable Nessus	Mozilla Firefox < 53 Multiple Vulnerabilities	21 Apr 201700:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 52.1 Multiple Vulnerabilities	21 Apr 201700:00	–	nessus
Tenable Nessus	CentOS 6 : firefox (CESA-2017:1104)	21 Apr 201700:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (CESA-2017:1106)	21 Apr 201700:00	–	nessus
Tenable Nessus	CentOS 6 / 7 : thunderbird (CESA-2017:1201)	10 May 201700:00	–	nessus

Vulners

Node

mozilla firefoxRange<53

OR

mozilla firefox_esrRange<45.9

OR

mozilla firefox_esrRange46–52.1

OR

mozilla thunderbirdRange<52.1

OR

red_hat red_hat_enterprise_linuxMatch6

OR

red_hat red_hat_enterprise_linuxMatch7

OR

canonical ubuntuMatch17.04

OR

canonical ubuntuMatch16.10

OR

novell opensuse_leapMatch42.2

OR

novell opensuse_leapMatch42.3

OR

novell opensuse_leapMatch42.1

OR

novell opensuse_leapMatch15.0

OR

novell suse_linux_enterprise_serverMatch12-ltss

OR

novell suse_linux_enterprise_server_for_sap_applicationsMatch12-ltss

OR

novell suse_linux_enterprise_server_for_sap_applicationsMatch12

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-5459
security-tracker	www.security-tracker.debian.org/tracker/CVE-2017-5459
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
access	www.access.redhat.com/security/cve/cve-2017-5459
suse	www.suse.com/security/cve/CVE-2017-5459/
mozilla	www.mozilla.org/security/advisories/mfsa2017-10/
mozilla	www.mozilla.org/security/advisories/mfsa2017-11/
mozilla	www.mozilla.org/security/advisories/mfsa2017-12/
mozilla	www.mozilla.org/security/advisories/mfsa2017-13/
wiki	www.wiki.astralinux.ru/pages/viewpage.action

12 Jan 2021 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 39.8

CVSS 210

EPSS0.04687

WebGL vulnerability Firefox browsers Thunderbird Memory overrun Remote service failure