Mozilla Firefox and Thunderbird CVE-2017-5398 Multiple Unspecified Memory-Corruption Vulnerabilities

Mozilla Firefox and Thunderbird are prone to multiple unspecified memory-corruption vulnerabilities.

Successful exploits may allow an attacker to execute arbitrary code in the context of the user running an affected application. Failed exploit attempts will result in a denial-of-service condition.

These issues affect versions prior to:

Firefox 52
Firefox ESR 45.8
Thunderbird 45.8

Information

Bugtraq ID: 96651
Class: Unknown
CVE: CVE-2017-5398

Remote: Yes
Local: No
Published: Mar 07 2017 12:00AM
Updated: Apr 10 2017 07:05PM
Credit: Boris Zbarsky, Christian Holler, Honza Bambas, Jon Coppeard, Randell Jesup, André Bargull, Kan-Ru Chen, and Nathan Froyd
Vulnerable: Ubuntu Ubuntu Linux 16.10
Ubuntu Ubuntu Linux 16.04 LTS
Ubuntu Ubuntu Linux 14.04 LTS
Ubuntu Ubuntu Linux 12.04 LTS i386
Ubuntu Ubuntu Linux 12.04 LTS amd64
Oracle Enterprise Linux 6.2
Oracle Enterprise Linux 6
Mozilla Thunderbird 45.5.1
Mozilla Thunderbird 45.1.1
Mozilla Thunderbird 24.1.1
Mozilla Thunderbird 24.0.1
Mozilla Thunderbird 17.0.7
Mozilla Thunderbird 17.0.6
Mozilla Thunderbird 17.0.5
Mozilla Thunderbird 17.0.4
Mozilla Thunderbird 17.0.3
Mozilla Thunderbird 17.0.2
Mozilla Thunderbird 17.0.1
Mozilla Thunderbird 16.0.2
Mozilla Thunderbird 15.0.1
Mozilla Thunderbird 13.0.1
Mozilla Thunderbird 12.0.1
Mozilla Thunderbird 3.1.20
Mozilla Thunderbird 3.1.14
Mozilla Thunderbird 3.1.13
Mozilla Thunderbird 3.1.12
Mozilla Thunderbird 3.1.7
Mozilla Thunderbird 3.1.5
Mozilla Thunderbird 3.1.4
Mozilla Thunderbird 3.0.11
Mozilla Thunderbird 3.0.9
Mozilla Thunderbird 3.0.8
Mozilla Thunderbird 3.0.5
Mozilla Thunderbird 3.0.4
Mozilla Thunderbird 3.0.2
Mozilla Thunderbird 3.0.1
Mozilla Thunderbird 2.0 24
Mozilla Thunderbird 2.0 .9
Mozilla Thunderbird 2.0 .8
Mozilla Thunderbird 2.0 .6
Mozilla Thunderbird 2.0 .5
Mozilla Thunderbird 2.0 .4
Mozilla Thunderbird 2.0 .19
Mozilla Thunderbird 2.0 .17
Mozilla Thunderbird 2.0 .16
Mozilla Thunderbird 2.0 .15
Mozilla Thunderbird 2.0 .14
Mozilla Thunderbird 2.0 .13
Mozilla Thunderbird 2.0 .12
Mozilla Thunderbird 1.5 beta 2
Mozilla Thunderbird 1.5 .9
Mozilla Thunderbird 1.5 .13
Mozilla Thunderbird 1.5
Mozilla Thunderbird 1.0.8
Mozilla Thunderbird 1.0.7
Mozilla Thunderbird 1.0.6
Mozilla Thunderbird 1.0.5
Mozilla Thunderbird 1.0.2
Mozilla Thunderbird 1.0.1
Mozilla Thunderbird 1.0
Mozilla Thunderbird 0.9
Mozilla Thunderbird 0.8
Mozilla Thunderbird 0.7.3
Mozilla Thunderbird 0.7.2
Mozilla Thunderbird 0.7.1
Mozilla Thunderbird 0.7
Mozilla Thunderbird 0.6
Mozilla Thunderbird 9.0.1
Mozilla Thunderbird 9.0
Mozilla Thunderbird 8.0
Mozilla Thunderbird 7.0.1
Mozilla Thunderbird 7.0
Mozilla Thunderbird 6.0.2
Mozilla Thunderbird 6.0.1
Mozilla Thunderbird 6.0
Mozilla Thunderbird 6
Mozilla Thunderbird 5.0
Mozilla Thunderbird 5
Mozilla Thunderbird 45.7
Mozilla Thunderbird 45.6
Mozilla Thunderbird 45.4
Mozilla Thunderbird 38.1
Mozilla Thunderbird 32.0
Mozilla Thunderbird 31.8
Mozilla Thunderbird 31.7
Mozilla Thunderbird 31.6
Mozilla Thunderbird 31.5
Mozilla Thunderbird 31.4
Mozilla Thunderbird 31.3
Mozilla Thunderbird 31.2
Mozilla Thunderbird 31.1.2
Mozilla Thunderbird 31.1.1
Mozilla Thunderbird 31.1.0
Mozilla Thunderbird 31.1
Mozilla Thunderbird 31.0
Mozilla Thunderbird 31
Mozilla Thunderbird 3.3
Mozilla Thunderbird 3.1.9
Mozilla Thunderbird 3.1.8
Mozilla Thunderbird 3.1.6
Mozilla Thunderbird 3.1.3
Mozilla Thunderbird 3.1.2
Mozilla Thunderbird 3.1.19
Mozilla Thunderbird 3.1.18
Mozilla Thunderbird 3.1.17
Mozilla Thunderbird 3.1.16
Mozilla Thunderbird 3.1.15
Mozilla Thunderbird 3.1.11
Mozilla Thunderbird 3.1.10
Mozilla Thunderbird 3.1.1
Mozilla Thunderbird 3.1
Mozilla Thunderbird 3.0.7
Mozilla Thunderbird 3.0.6
Mozilla Thunderbird 3.0.3
Mozilla Thunderbird 3.0.10
Mozilla Thunderbird 3.0
Mozilla Thunderbird 24.8.1
Mozilla Thunderbird 24.8
Mozilla Thunderbird 24.7
Mozilla Thunderbird 24.6
Mozilla Thunderbird 24.5
Mozilla Thunderbird 24.4
Mozilla Thunderbird 24.3
Mozilla Thunderbird 24.2
Mozilla Thunderbird 24.1
Mozilla Thunderbird 24.0
Mozilla Thunderbird 23.0
Mozilla Thunderbird 2.1
Mozilla Thunderbird 2.0.0.23
Mozilla Thunderbird 2.0.0.22
Mozilla Thunderbird 2.0.0.21
Mozilla Thunderbird 2.0.0.20
Mozilla Thunderbird 2.0.0.18
Mozilla Thunderbird 2.0.0.11
Mozilla Thunderbird 17.0.9
Mozilla Thunderbird 17.0.8
Mozilla Thunderbird 17.0
Mozilla Thunderbird 16.0.1
Mozilla Thunderbird 16.0
Mozilla Thunderbird 16
Mozilla Thunderbird 15.0
Mozilla Thunderbird 15
Mozilla Thunderbird 14.0
Mozilla Thunderbird 14
Mozilla Thunderbird 13.0
Mozilla Thunderbird 12.0
Mozilla Thunderbird 11.0.1
Mozilla Thunderbird 11.0
Mozilla Thunderbird 10.0.4
Mozilla Thunderbird 10.0.3
Mozilla Thunderbird 10.0.2
Mozilla Thunderbird 10.0.1
Mozilla Thunderbird 10.0
Mozilla Thunderbird 1.5.0.8
Mozilla Thunderbird 1.5.0.7
Mozilla Thunderbird 1.5.0.5
Mozilla Thunderbird 1.5.0.4
Mozilla Thunderbird 1.5.0.2
Mozilla Thunderbird 1.5.0.14
Mozilla Thunderbird 1.5.0.12
Mozilla Thunderbird 1.5.0.10
Mozilla Thunderbird 1.5.0.1
Mozilla Thunderbird 1.0.5 Beta
Mozilla Firefox ESR 45.7
Mozilla Firefox 51
Debian Linux 6.0 sparc
Debian Linux 6.0 s/390
Debian Linux 6.0 powerpc
Debian Linux 6.0 mips
Debian Linux 6.0 ia-64
Debian Linux 6.0 ia-32
Debian Linux 6.0 arm
Debian Linux 6.0 amd64
CentOS CentOS 5

Not Vulnerable: Mozilla Thunderbird 52
Mozilla Thunderbird 45.8
Mozilla Firefox ESR 45.8
Mozilla Firefox 52

References:

• Mozilla Homepage (Mozilla Foundation)
  
• mfsa2017-05 :Security vulnerabilities fixed in Firefox 52 (mozilla)
  
• mfsa2017-06:Security vulnerabilities fixed in Firefox ESR 45.8 (Mozilla)
  
• mfsa2017-07:Security vulnerabilities fixed in Thunderbird 45.8 (Mozilla)
  
• Mozilla Foundation Security Advisory 2017-09:Security vulnerabilities fixed in - (Mozilla)
  

Source: www.securityfocus.com