CVE-2017-7824

A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content. This is due to an incorrect value being passed within the library during checks and results in a potentially exploitable crash. This vulnerability affects Firefox < 56, Firefox ESR < 52.4, and Thunderbird < 52.4.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mozillaCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
VendorProductVersion
redhatenterprise_linux_aus
7.4
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_desktop
7.0
redhatenterprise_linux_eus
7.4
redhatenterprise_linux_eus
7.5
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server
7.0
redhatenterprise_linux_workstation
6.0
redhatenterprise_linux_workstation
7.0
debiandebian_linux
7.0
debiandebian_linux
8.0
debiandebian_linux
9.0
mozillafirefox
𝑥
< 56.0
mozillafirefox_esr
𝑥
< 52.4.0
mozillathunderbird
𝑥
< 52.4.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
firefox
sid
132.0.1-1
fixed
firefox-esr
bullseye
115.14.0esr-1~deb11u1
fixed
bullseye (security)
128.4.0esr-1~deb11u1
fixed
bookworm
115.14.0esr-1~deb12u1
fixed
bookworm (security)
128.4.0esr-1~deb12u1
fixed
trixie
128.3.1esr-2
fixed
sid
128.4.0esr-1
fixed
thunderbird
bullseye
1:115.12.0-1~deb11u1
fixed
bullseye (security)
1:128.4.0esr-1~deb11u1
fixed
bookworm
1:115.12.0-1~deb12u1
fixed
bookworm (security)
1:128.4.0esr-1~deb12u1
fixed
sid
1:128.4.0esr-1
fixed
trixie
1:128.4.0esr-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
bionic
Fixed 56.0+build6-0ubuntu1
released
artful
Fixed 56.0+build6-0ubuntu1
released
zesty
Fixed 56.0+build6-0ubuntu0.17.04.1
released
xenial
Fixed 56.0+build6-0ubuntu0.16.04.1
released
trusty
Fixed 56.0+build6-0ubuntu0.14.04.1
released
thunderbird
bionic
Fixed 1:52.4.0+build1-0ubuntu2
released
artful
Fixed 1:52.4.0+build1-0ubuntu2
released
zesty
Fixed 1:52.4.0+build1-0ubuntu0.17.04.2
released
xenial
Fixed 1:52.4.0+build1-0ubuntu0.16.04.2
released
trusty
Fixed 1:52.4.0+build1-0ubuntu0.14.04.2
released