vulnwire
7.5high

CVE-2017-5378

Hashed codes of JavaScript objects are shared between pages.

Published 8 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.3%
percentile 89%
Public exploits
0
none known

Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.

Exploit prediction (EPSS)

3.29% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.07.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

  • Mozilla Thunderbird
  • Mozilla Firefox ESR
  • Mozilla Firefox

Classification

Weakness
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

  • mozilla.org /security/advisories/mfsa2017-03/ · x_refsource_CONFIRM, x_transferred
  • mozilla.org /security/advisories/mfsa2017-02/ · x_refsource_CONFIRM, x_transferred
  • bugzilla.mozilla.org /show_bug.cgi?id=1312001 · x_refsource_CONFIRM, x_transferred
  • security.gentoo.org /glsa/201702-22 · vendor-advisory, x_refsource_GENTOO, x_transferred
  • bugzilla.mozilla.org /show_bug.cgi?id=1330769 · x_refsource_CONFIRM, x_transferred
  • debian.org /security/2017/dsa-3832 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • security.gentoo.org /glsa/201702-13 · vendor-advisory, x_refsource_GENTOO, x_transferred
  • debian.org /security/2017/dsa-3771 · vendor-advisory, x_refsource_DEBIAN, x_transferred
  • securitytracker.com /id/1037693 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • mozilla.org /security/advisories/mfsa2017-01/ · x_refsource_CONFIRM, x_transferred
  • rhn.redhat.com /errata/RHSA-2017-0190.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • rhn.redhat.com /errata/RHSA-2017-0238.html · vendor-advisory, x_refsource_REDHAT, x_transferred
  • securityfocus.com /bid/95769 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.