35
CVE-2017-5375
- CVSS 3.0
- 9.8 critical
- EPSS
- 34%p98
- Published
- ·
- Modified
Description · NVD
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.
- Products
- enterprise linux desktop, enterprise linux server, enterprise linux workstation, firefox, thunderbird, debian linux
- Weakness
- CWE-119
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H