Home

CVE-2017-5398

Description

Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
3.265

Associated Vulnerability

VulnerabilityOS Platform
Update for Mozilla Thunderbird (45.8.0)Windows
Update for Mozilla Firefox ESR (45.8.0)Windows
Update for Mozilla Firefox ESR x64 (45.8.0)Windows
Update for Mozilla Firefox (52.0)Windows
Update for Mozilla Firefox x64 (52.0)Windows
Update for Mozilla Firefox ESR (52.0.1)Windows
Update for Mozilla Firefox ESR x64 (52.0.1)Windows
Update for Mozilla Firefox (52.0.1)Windows
Update for Mozilla Firefox x64 (52.0.1)Windows
Mozilla Firefox (52.0.2)Windows
Mozilla Firefox x64 (52.0.2)Windows
Update for Mozilla Thunderbird (52.0)Windows
Update for Mozilla Thunderbird (52.0.1)Windows
Update for Mozilla Firefox ESR (52.1.0)Windows
Update for Mozilla Firefox ESR x64 (52.1.0)Windows
Update for Mozilla Thunderbird (52.1.0)Windows
Update for Mozilla Firefox ESR (52.1.1)Windows
Update for Mozilla Firefox ESR x64 (52.1.1)Windows
Update for Mozilla Thunderbird (52.1.1)Windows
Update for Mozilla Firefox ESR (52.1.2)Windows
Update for Mozilla Firefox ESR x64 (52.1.2)Windows
Update for Mozilla Firefox ESR (52.2.0)Windows
Update for Mozilla Firefox ESR x64 (52.2.0)Windows
Update for Mozilla Thunderbird (52.2.0)Windows
Update for Mozilla Thunderbird (52.2.1)Windows
Update for Mozilla Firefox ESR (52.2.1)Windows
Update for Mozilla Firefox ESR x64 (52.2.1)Windows
Update for Mozilla Firefox ESR (52.3.0)Windows
Update for Mozilla Firefox ESR x64 (52.3.0)Windows
Update for Mozilla Thunderbird (52.3.0)Windows
Update for Mozilla Firefox ESR (52.4.0)Windows
Update for Mozilla Firefox ESR x64 (52.4.0)Windows
Update for Mozilla Thunderbird (52.4.0)Windows
Update for Mozilla Firefox ESR (52.4.1)Windows
Update for Mozilla Firefox ESR x64 (52.4.1)Windows
Update for Mozilla Firefox ESR (52.5.0)Windows
Update for Mozilla Firefox ESR x64 (52.5.0)Windows
Update for Mozilla Thunderbird (52.5.0)Windows
Update for Mozilla Firefox ESR (52.5.1)Windows
Update for Mozilla Firefox ESR x64 (52.5.1)Windows
Update for Mozilla Firefox ESR (52.5.2)Windows
Update for Mozilla Firefox ESR x64 (52.5.2)Windows
Updates for Mozilla Thunderbird (52.5.2)Windows
Update for Mozilla Firefox ESR (52.5.3)Windows
Update for Mozilla Firefox ESR x64 (52.5.3)Windows
Updates for Mozilla Thunderbird (52.6.0)Windows
Updates for Mozilla Firefox ESR (52.6.0)Windows
Updates for Mozilla Firefox ESR (x64) (52.6.0)Windows
Updates for Mozilla Firefox ESR (52.7.0)Windows
Updates for Mozilla Firefox ESR (x64) (52.7.0)Windows
Updates for Mozilla Firefox ESR (52.7.1)Windows
Updates for Mozilla Firefox ESR (x64) (52.7.1)Windows
Updates for Mozilla Firefox ESR (52.7.2)Windows
Updates for Mozilla Firefox ESR (x64) (52.7.2)Windows
Updates for Mozilla Thunderbird (52.7.0)Windows
Updates for Mozilla Firefox ESR (52.7.3)Windows
Updates for Mozilla Firefox ESR (x64) (52.7.3)Windows
Updates for Mozilla Firefox ESR (52.7.4)Windows
Updates for Mozilla Firefox ESR (x64) (52.7.4)Windows
Updates for Mozilla Firefox ESR (52.8.0)Windows
Updates for Mozilla Firefox ESR (x64) (52.8.0)Windows
Mozilla Thunderbird (52.8.0)Windows
Updates for Mozilla Firefox ESR (52.8.1)Windows
Updates for Mozilla Firefox ESR (x64) (52.8.1)Windows
Updates for Mozilla Firefox ESR (52.9.0)Windows
Updates for Mozilla Firefox ESR (x64) (52.9.0)Windows
Mozilla Thunderbird (52.9.0)Windows
Mozilla Thunderbird (52.9.1)Windows
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (52.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (52.0.1)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Firefox For Mac (52.0.2)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.6.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.2.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.2.1)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.1.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.1.1)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (45.8.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.0.1)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.3.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.4.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.5.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.5.2)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.7.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.8.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.9.0)Mac
Multiple vulnerabilities are fixed in Update for Mozilla Thunderbird For Mac (52.9.1)Mac
Multiple Vulnerabilities are affected in Firefox ESR for Mac 45.7.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 45.7.0Mac
Multiple Vulnerabilities are affected in Mozilla Firefox for Mac 51.0.3Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 45.7.1Mac
Multiple Vulnerabilities are affected in Mozilla Thunderbird for Mac 51.0-beta2Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac 45.8Mac
Mozilla Open Source web browser (USN-2880-2) firefox_52.0.2+build1-0ubuntu0.12.04.1_i386.debLinux
Mozilla Open Source web browser (USN-2880-2) firefox_52.0.2+build1-0ubuntu0.12.04.1_amd64.debLinux
Mozilla Open Source web browser (USN-3124-1) firefox_52.0+build2-0ubuntu0.12.04.1_i386.debLinux
Mozilla Open Source web browser (USN-3124-1) firefox_52.0+build2-0ubuntu0.12.04.1_amd64.debLinux
Mozilla Open Source web browser (USN-3124-1) firefox_52.0+build2-0ubuntu0.14.04.1_i386.debLinux
Mozilla Open Source web browser (USN-3124-1) firefox_52.0+build2-0ubuntu0.14.04.1_amd64.debLinux
Mozilla Open Source web browser (USN-3124-1) firefox_52.0+build2-0ubuntu0.16.04.1_i386.debLinux
Mozilla Open Source web browser (USN-3124-1) firefox_52.0+build2-0ubuntu0.16.04.1_amd64.debLinux
Mozilla Open Source mail and newsgroup client (USN-3165-1) thunderbird_45.8.0+build1-0ubuntu0.12.04.1_i386.debLinux
Mozilla Open Source mail and newsgroup client (USN-3165-1) thunderbird_45.8.0+build1-0ubuntu0.12.04.1_amd64.debLinux
Mozilla Open Source web browser (USN-3175-1) firefox_52.0.2+build1-0ubuntu0.16.10.1_i386.debLinux
Mozilla Open Source web browser (USN-3175-1) firefox_52.0.2+build1-0ubuntu0.16.10.1_amd64.debLinux
Mozilla Open Source web browser (USN-3175-2) firefox_52.0.2+build1-0ubuntu0.12.04.1_i386.debLinux
Mozilla Open Source web browser (USN-3175-2) firefox_52.0.2+build1-0ubuntu0.12.04.1_amd64.debLinux
Mozilla Open Source web browser (USN-3216-2) firefox_52.0.2+build1-0ubuntu0.12.04.1_i386.debLinux
Mozilla Open Source web browser (USN-3216-2) firefox_52.0.2+build1-0ubuntu0.12.04.1_amd64.debLinux
Mozilla Open Source mail and newsgroup client (USN-3233-1) thunderbird_45.8.0+build1-0ubuntu0.12.04.1_i386.debLinux
Mozilla Open Source mail and newsgroup client (USN-3233-1) thunderbird_45.8.0+build1-0ubuntu0.12.04.1_amd64.debLinux
Mozilla Open Source web browser (USN-3216-1) firefox_52.0+build2-0ubuntu0.12.04.1_i386.debLinux
Mozilla Open Source web browser (USN-3216-1) firefox_52.0+build2-0ubuntu0.12.04.1_amd64.debLinux
Mozilla Open Source web browser (USN-3216-1) firefox_52.0+build2-0ubuntu0.14.04.1_i386.debLinux
Mozilla Open Source web browser (USN-3216-1) firefox_52.0+build2-0ubuntu0.14.04.1_amd64.debLinux
Mozilla Open Source web browser (USN-3216-1) firefox_52.0+build2-0ubuntu0.16.04.1_i386.debLinux
Mozilla Open Source web browser (USN-3216-1) firefox_52.0+build2-0ubuntu0.16.04.1_amd64.debLinux
Mozilla Open Source web browser (USN-3238-1) firefox_52.0.2+build1-0ubuntu0.12.04.1_i386.debLinux
Mozilla Open Source web browser (USN-3238-1) firefox_52.0.2+build1-0ubuntu0.12.04.1_amd64.debLinux
firefox-esr security update(DSA-3771-1) firefox-esr_45.8.0esr-1~deb8u1_kfreebsd-i386.debLinux
firefox-esr security update(DSA-3805-1) firefox-esr_45.8.0esr-1~deb8u1_i386.debLinux
firefox-esr security update(DSA-3805-1) firefox-esr_45.8.0esr-1~deb8u1_amd64.debLinux
firefox-esr security update(DSA-3805-1) firefox-esr_45.8.0esr-1~deb8u1_kfreebsd-i386.debLinux
firefox-esr security update(DSA-3805-1) firefox-esr_45.8.0esr-1~deb8u1_kfreebsd-amd64.debLinux
(RHSA-2017:0459) Critical: firefox security update firefox-45.8.0-2.el5_11.i386.rpmLinux
(RHSA-2017:0459) Critical: firefox security update firefox-45.8.0-2.el5_11.x86_64.rpmLinux
(RHSA-2017:0498) Important: thunderbird security update thunderbird-45.8.0-1.el5_11.i386.rpmLinux
(RHSA-2017:0498) Important: thunderbird security update thunderbird-45.8.0-1.el5_11.x86_64.rpmLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-304728Update for Mozilla Thunderbird (45.8.0)
PATCH-304731Update for Mozilla Firefox ESR (45.8.0)
PATCH-304732Update for Mozilla Firefox ESR x64 (45.8.0)
PATCH-344482Mozilla Firefox (134.0.1)
PATCH-304735Update for Mozilla Firefox x64 (52.0)
PATCH-304794Update for Mozilla Firefox ESR (52.0.1)
PATCH-304795Update for Mozilla Firefox ESR x64 (52.0.1)
PATCH-344482Mozilla Firefox (134.0.1)
PATCH-304797Update for Mozilla Firefox x64 (52.0.1)
PATCH-344482Mozilla Firefox (134.0.1)
PATCH-305435Mozilla Firefox x64 (52.0.2)
PATCH-305540Update for Mozilla Thunderbird (52.0)
PATCH-305595Update for Mozilla Thunderbird (52.0.1)
PATCH-305615Update for Mozilla Firefox ESR (52.1.0)
PATCH-305616Update for Mozilla Firefox ESR x64 (52.1.0)
PATCH-305667Update for Mozilla Thunderbird (52.1.0)
PATCH-305697Update for Mozilla Firefox ESR (52.1.1)
PATCH-305698Update for Mozilla Firefox ESR x64 (52.1.1)
PATCH-305744Update for Mozilla Thunderbird (52.1.1)
PATCH-305773Update for Mozilla Firefox ESR (52.1.2)
PATCH-305774Update for Mozilla Firefox ESR x64 (52.1.2)
PATCH-305926Update for Mozilla Firefox ESR (52.2.0)
PATCH-306017Update for Mozilla Firefox ESR (52.2.1)
PATCH-306195Update for Mozilla Firefox ESR (52.3.0)
PATCH-306451Update for Mozilla Firefox ESR (52.4.0)
PATCH-306503Update for Mozilla Firefox ESR (52.4.1)
PATCH-306880Updates for Mozilla Thunderbird (52.5.2)
PATCH-307016Updates for Mozilla Thunderbird (52.6.0)
PATCH-307007Updates for Mozilla Firefox ESR (52.6.0)
PATCH-307012Updates for Mozilla Firefox ESR (x64) (52.6.0)
PATCH-307244Updates for Mozilla Firefox ESR (52.7.0)
PATCH-307247Updates for Mozilla Firefox ESR (x64) (52.7.0)
PATCH-307256Updates for Mozilla Firefox ESR (52.7.1)
PATCH-307259Updates for Mozilla Firefox ESR (x64) (52.7.1)
PATCH-307269Updates for Mozilla Firefox ESR (52.7.2)
PATCH-307273Updates for Mozilla Firefox ESR (x64) (52.7.2)
PATCH-307296Updates for Mozilla Thunderbird (52.7.0)
PATCH-307307Updates for Mozilla Firefox ESR (52.7.3)
PATCH-307311Updates for Mozilla Firefox ESR (x64) (52.7.3)
PATCH-307460Updates for Mozilla Firefox ESR (52.7.4)
PATCH-307464Updates for Mozilla Firefox ESR (x64) (52.7.4)
PATCH-307503Updates for Mozilla Firefox ESR (52.8.0)
PATCH-307508Updates for Mozilla Firefox ESR (x64) (52.8.0)
PATCH-307561Mozilla Thunderbird (52.8.0)
PATCH-307643Updates for Mozilla Firefox ESR (52.8.1)
PATCH-307647Updates for Mozilla Firefox ESR (x64) (52.8.1)
PATCH-307722Updates for Mozilla Firefox ESR (52.9.0)
PATCH-307728Updates for Mozilla Firefox ESR (x64) (52.9.0)
PATCH-307749Mozilla Thunderbird (52.9.0)
PATCH-307789Mozilla Thunderbird (52.9.1)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-612783Mozilla Firefox For Mac (145.0.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234