CVE-2017-5377

CVSS v3.0 9.8 (Critical)

CVSS v2.0 7.5 (High)

EPSS 0.40 % (74^th)

Affected Products 1

Advisories 4

A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 51.

Weaknesses

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2018-06-11 21:29:02
(6 years ago)
Updated Date: 2018-08-07 14:52:31
(6 years ago)

Affected Products

Mozilla

Firefox

Configuration #1

		CPE23	From	Up To
	Mozilla Firefox prior 51.0 version	cpe:2.3:a:mozilla:firefox		< 51.0