CVE-2017-5428

2018-06-1121:00:00

mozilla

www.cve.org

AI Score

8.9

Confidence

High

EPSS

0.604

Percentile

97.8%

JSON

An integer overflow in “createImageBitmap()” was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the “createImageBitmap” API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user’s computer. This vulnerability affects Firefox ESR < 52.0.1 and Firefox < 52.0.1.

CNA Affected

[
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "52.0.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "52.0.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]