CVE-2017-5376

CRITICALImmediate

Published:Jun 11, 2018(7 years ago)

Modified:Nov 25, 2025

Remote ExploitNo Auth RequiredNo InteractionLow Complexity

Vulnerability Description

Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.

Network AccessLow ComplexityNo Auth NeededNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Vendor	Product	Versions	Fixed In
debian	debian_linux	-	-
redhat	enterprise_linux	-	-
redhat	enterprise_linux	-

v3.1

9.8/ 10.0

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

References

debian / debian_linux

http://www.securitytracker.com/id/1037693Third Party Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1311687Issue Tracking

https://security.gentoo.org/glsa/201702-13Third Party Advisory

https://security.gentoo.org/glsa/201702-22Third Party Advisory

https://www.debian.org/security/2017/dsa-3771Third Party Advisory

https://www.debian.org/security/2017/dsa-3832Third Party Advisory

https://www.mozilla.org/security/advisories/mfsa2017-01/Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2017-02/Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2017-03/Vendor Advisory

http://rhn.redhat.com/errata/RHSA-2017-0190.htmlThird Party Advisory

http://rhn.redhat.com/errata/RHSA-2017-0238.htmlThird Party Advisory

http://www.securityfocus.com/bid/95758Third Party Advisory