Critical severity9.8NVD Advisory· Published Jun 11, 2018· Updated Jun 17, 2026
CVE-2017-5373
CVE-2017-5373
Description
Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
29<51+ 2 more
- (no CPE)range: <51
- (no CPE)range: unspecified
- (no CPE)range: unspecified
<45.7+ 1 more
- (no CPE)range: <45.7
- (no CPE)range: unspecified
- osv-coords24 versionspkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweedpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Point%20of%20Sale%2011%20SP3pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP3-TERADATApkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%202.1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%20Proxy%202.1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%205pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Package%20Hub%2012
< 128.5.1-1.1+ 23 more
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 92.0-1.2
- (no CPE)range: < 91.1.1-1.1
- (no CPE)range: < 45.7.0esr-99.1
- (no CPE)range: < 45.7.0esr-99.1
- (no CPE)range: < 45.7.0esr-65.2
- (no CPE)range: < 45.7.0esr-65.2
- (no CPE)range: < 45.7.0esr-65.2
- (no CPE)range: < 45.7.0esr-65.2
- (no CPE)range: < 45.7.0esr-99.1
- (no CPE)range: < 45.7.0esr-99.1
- (no CPE)range: < 45.7.0esr-99.1
- (no CPE)range: < 45.7.0esr-99.1
- (no CPE)range: < 45.7.0esr-65.2
- (no CPE)range: < 45.7.0esr-99.1
- (no CPE)range: < 45.7.0esr-99.1
- (no CPE)range: < 45.7.0esr-99.1
- (no CPE)range: < 45.7.0esr-65.2
- (no CPE)range: < 45.7.0esr-99.1
- (no CPE)range: < 45.7.0esr-99.1
- (no CPE)range: < 45.7.0esr-65.2
- (no CPE)range: < 45.7.0esr-65.2
- (no CPE)range: < 45.7.0esr-65.2
- (no CPE)range: < 45.7.0-23.1
Patches
Vulnerability mechanics
References
12- rhn.redhat.com/errata/RHSA-2017-0190.htmlnvdThird Party Advisory
- rhn.redhat.com/errata/RHSA-2017-0238.htmlnvdThird Party Advisory
- www.securityfocus.com/bid/95762nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1037693nvdThird Party AdvisoryVDB Entry
- security.gentoo.org/glsa/201702-13nvdThird Party Advisory
- security.gentoo.org/glsa/201702-22nvdThird Party Advisory
- www.debian.org/security/2017/dsa-3771nvdThird Party Advisory
- www.debian.org/security/2017/dsa-3832nvdThird Party Advisory
- www.mozilla.org/security/advisories/mfsa2017-01/nvdVendor Advisory
- www.mozilla.org/security/advisories/mfsa2017-02/nvdVendor Advisory
- www.mozilla.org/security/advisories/mfsa2017-03/nvdVendor Advisory
- bugzilla.mozilla.org/buglist.cginvdIssue Tracking
News mentions
0No linked articles in our index yet.