Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-5403
HistoryJun 11, 2018 - 9:29 p.m.

Design/Logic Flaw

2018-06-1121:29:00
PRIOn knowledge base
www.prio-n.com
5

8.7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.0%

When adding a range to an object in the DOM, it is possible to use “addRange” to add the range to an incorrect root object. This triggers a use-after-free, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 52 and Thunderbird < 52.

CPENameOperatorVersion
firefoxlt52.0
thunderbirdlt52.0

8.7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.0%