Beveiligingsadvies

CVE-2017-5428

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-06-11 21:00:00
Laatst bijgewerkt 2024-08-05 15:04:14
Toegewezen door mozilla
CVSS-score geen score
Status PUBLISHED

Beschrijving

An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the "createImageBitmap" API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user's computer. This vulnerability affects Firefox ESR < 52.0.1 and Firefox < 52.0.1.