Description
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mozilla Firefox
unspecified to < 56affected
Mozilla Firefox ESR
unspecified to < 52.4affected
Mozilla Thunderbird
unspecified to < 52.4affected
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1398381 ↗
- https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html ↗
- https://www.mozilla.org/security/advisories/mfsa2017-22/ ↗
- http://www.securitytracker.com/id/1039465 ↗
- https://access.redhat.com/errata/RHSA-2017:2831 ↗
- https://access.redhat.com/errata/RHSA-2017:2885 ↗
- https://www.mozilla.org/security/advisories/mfsa2017-21/ ↗
- https://www.debian.org/security/2017/dsa-4014 ↗
- http://www.securityfocus.com/bid/101053 ↗
- https://www.mozilla.org/security/advisories/mfsa2017-23/ ↗
- https://www.debian.org/security/2017/dsa-3987 ↗
- https://security.gentoo.org/glsa/201803-14 ↗