{"id":"CVE-2017-7824","state":"PUBLISHED","title":"A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the lib","description":"A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.","publishedAt":"2018-06-11T21:00:00.000Z","updatedAt":"2024-08-05T16:12:28.449Z","severity":null,"assigner":"mozilla","products":["Mozilla Firefox","Mozilla Firefox ESR","Mozilla Thunderbird"],"affected":[{"vendor":"Mozilla","product":"Firefox","versions":[{"version":"unspecified","status":"affected","lessThan":"56","versionType":"custom"}]},{"vendor":"Mozilla","product":"Firefox ESR","versions":[{"version":"unspecified","status":"affected","lessThan":"52.4","versionType":"custom"}]},{"vendor":"Mozilla","product":"Thunderbird","versions":[{"version":"unspecified","status":"affected","lessThan":"52.4","versionType":"custom"}]}],"references":["https://bugzilla.mozilla.org/show_bug.cgi?id=1398381","https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html","https://www.mozilla.org/security/advisories/mfsa2017-22/","http://www.securitytracker.com/id/1039465","https://access.redhat.com/errata/RHSA-2017:2831","https://access.redhat.com/errata/RHSA-2017:2885","https://www.mozilla.org/security/advisories/mfsa2017-21/","https://www.debian.org/security/2017/dsa-4014","http://www.securityfocus.com/bid/101053","https://www.mozilla.org/security/advisories/mfsa2017-23/","https://www.debian.org/security/2017/dsa-3987","https://security.gentoo.org/glsa/201803-14"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:54.997Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/7xxx/CVE-2017-7824.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-7824","state":"PUBLISHED","datePublished":"2018-06-11T21:00:00.000Z","dateUpdated":"2024-08-05T16:12:28.449Z","assignerShortName":"mozilla","assignerOrgId":"f16b083a-5664-49f3-a51e-8d479e5ed7fe","dateReserved":"2017-04-12T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4."}],"affected":[{"vendor":"Mozilla","product":"Firefox","versions":[{"version":"unspecified","status":"affected","lessThan":"56","versionType":"custom"}]},{"vendor":"Mozilla","product":"Firefox ESR","versions":[{"version":"unspecified","status":"affected","lessThan":"52.4","versionType":"custom"}]},{"vendor":"Mozilla","product":"Thunderbird","versions":[{"version":"unspecified","status":"affected","lessThan":"52.4","versionType":"custom"}]}],"references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1398381","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html","name":"[debian-lts-announce] 20171101 [SECURITY] [DLA 1153-1] icedove/thunderbird security update","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-22/","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securitytracker.com/id/1039465","name":"1039465","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2831","name":"RHSA-2017:2831","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2885","name":"RHSA-2017:2885","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-21/","tags":["x_refsource_CONFIRM"]},{"url":"https://www.debian.org/security/2017/dsa-4014","name":"DSA-4014","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://www.securityfocus.com/bid/101053","name":"101053","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-23/","tags":["x_refsource_CONFIRM"]},{"url":"https://www.debian.org/security/2017/dsa-3987","name":"DSA-3987","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://security.gentoo.org/glsa/201803-14","name":"GLSA-201803-14","tags":["vendor-advisory","x_refsource_GENTOO"]}],"problemTypes":[{"descriptions":[{"description":"Buffer overflow when drawing and validating elements with ANGLE","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mozilla","dateUpdated":"2018-06-12T09:57:01.000Z","orgId":"f16b083a-5664-49f3-a51e-8d479e5ed7fe"},"datePublic":"2017-09-28T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security@mozilla.org","ID":"CVE-2017-7824","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Firefox","version":{"version_data":[{"version_affected":"<","version_value":"56"}]}},{"product_name":"Firefox ESR","version":{"version_data":[{"version_affected":"<","version_value":"52.4"}]}},{"product_name":"Thunderbird","version":{"version_data":[{"version_affected":"<","version_value":"52.4"}]}}]},"vendor_name":"Mozilla"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Buffer overflow when drawing and validating elements with ANGLE"}]}]},"references":{"reference_data":[{"name":"https://bugzilla.mozilla.org/show_bug.cgi?id=1398381","refsource":"CONFIRM","url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1398381"},{"name":"[debian-lts-announce] 20171101 [SECURITY] [DLA 1153-1] icedove/thunderbird security update","refsource":"MLIST","url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html"},{"name":"https://www.mozilla.org/security/advisories/mfsa2017-22/","refsource":"CONFIRM","url":"https://www.mozilla.org/security/advisories/mfsa2017-22/"},{"name":"1039465","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1039465"},{"name":"RHSA-2017:2831","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2017:2831"},{"name":"RHSA-2017:2885","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2017:2885"},{"name":"https://www.mozilla.org/security/advisories/mfsa2017-21/","refsource":"CONFIRM","url":"https://www.mozilla.org/security/advisories/mfsa2017-21/"},{"name":"DSA-4014","refsource":"DEBIAN","url":"https://www.debian.org/security/2017/dsa-4014"},{"name":"101053","refsource":"BID","url":"http://www.securityfocus.com/bid/101053"},{"name":"https://www.mozilla.org/security/advisories/mfsa2017-23/","refsource":"CONFIRM","url":"https://www.mozilla.org/security/advisories/mfsa2017-23/"},{"name":"DSA-3987","refsource":"DEBIAN","url":"https://www.debian.org/security/2017/dsa-3987"},{"name":"GLSA-201803-14","refsource":"GENTOO","url":"https://security.gentoo.org/glsa/201803-14"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1398381","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html","name":"[debian-lts-announce] 20171101 [SECURITY] [DLA 1153-1] icedove/thunderbird security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-22/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securitytracker.com/id/1039465","name":"1039465","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2831","name":"RHSA-2017:2831","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2017:2885","name":"RHSA-2017:2885","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-21/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.debian.org/security/2017/dsa-4014","name":"DSA-4014","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/101053","name":"101053","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-23/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.debian.org/security/2017/dsa-3987","name":"DSA-3987","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://security.gentoo.org/glsa/201803-14","name":"GLSA-201803-14","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T16:12:28.449Z"}}]}}}