csaf_suse - suse-su-2017:0714-1

suse-su-2017:0714-1

Vulnerability from csaf_suse

Published

2017-03-17 07:38

Modified

2017-03-17 07:38

Summary

Security update for MozillaFirefox

Notes

Title of the patch

Security update for MozillaFirefox

Description of the patch

This update for MozillaFirefox to ESR 45.8 fixes the following issues: Security issues fixed (bsc#1028391): - CVE-2017-5402: Use-after-free working with events in FontFace objects - CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping - CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP - CVE-2017-5401: Memory Corruption when handling ErrorResult - CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters - CVE-2017-5404: Use-after-free working with ranges in selections - CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports - CVE-2017-5408: Cross-origin reading of video captions in violation of CORS - CVE-2017-5409: File deletion via callback parameter in Mozilla Windows Updater and Maintenance Service - CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and Firefox ESR 45.8

Patchnames

SUSE-SLE-DESKTOP-12-SP1-2017-392,SUSE-SLE-DESKTOP-12-SP2-2017-392,SUSE-SLE-RPI-12-SP2-2017-392,SUSE-SLE-SAP-12-2017-392,SUSE-SLE-SDK-12-SP1-2017-392,SUSE-SLE-SDK-12-SP2-2017-392,SUSE-SLE-SERVER-12-2017-392,SUSE-SLE-SERVER-12-SP1-2017-392,SUSE-SLE-SERVER-12-SP2-2017-392

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaFirefox",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for MozillaFirefox to ESR 45.8 fixes the following issues:\n\nSecurity issues fixed (bsc#1028391):\n- CVE-2017-5402: Use-after-free working with events in FontFace objects\n- CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping\n- CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP\n- CVE-2017-5401: Memory Corruption when handling ErrorResult\n- CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters\n- CVE-2017-5404: Use-after-free working with ranges in selections\n- CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports\n- CVE-2017-5408: Cross-origin reading of video captions in violation of CORS\n- CVE-2017-5409: File deletion via callback parameter in Mozilla Windows Updater and Maintenance Service\n- CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and Firefox ESR 45.8\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP1-2017-392,SUSE-SLE-DESKTOP-12-SP2-2017-392,SUSE-SLE-RPI-12-SP2-2017-392,SUSE-SLE-SAP-12-2017-392,SUSE-SLE-SDK-12-SP1-2017-392,SUSE-SLE-SDK-12-SP2-2017-392,SUSE-SLE-SERVER-12-2017-392,SUSE-SLE-SERVER-12-SP1-2017-392,SUSE-SLE-SERVER-12-SP2-2017-392",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0714-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:0714-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170714-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:0714-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-March/002701.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1028391",
        "url": "https://bugzilla.suse.com/1028391"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5398 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5398/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5400 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5400/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5401 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5401/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5402 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5402/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5404 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5404/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5405 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5405/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5407 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5407/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5408 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5408/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5409 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5409/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5410 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5410/"
      }
    ],
    "title": "Security update for MozillaFirefox",
    "tracking": {
      "current_release_date": "2017-03-17T07:38:03Z",
      "generator": {
        "date": "2017-03-17T07:38:03Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:0714-1",
      "initial_release_date": "2017-03-17T07:38:03Z",
      "revision_history": [
        {
          "date": "2017-03-17T07:38:03Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-45.8.0esr-102.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-45.8.0esr-102.1.aarch64",
                  "product_id": "MozillaFirefox-45.8.0esr-102.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
                  "product_id": "MozillaFirefox-translations-45.8.0esr-102.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
                "product": {
                  "name": "MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
                  "product_id": "MozillaFirefox-devel-45.8.0esr-102.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
                  "product_id": "MozillaFirefox-devel-45.8.0esr-102.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-45.8.0esr-102.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-45.8.0esr-102.1.ppc64le",
                  "product_id": "MozillaFirefox-45.8.0esr-102.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
                "product": {
                  "name": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
                  "product_id": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-45.8.0esr-102.1.s390x",
                "product": {
                  "name": "MozillaFirefox-devel-45.8.0esr-102.1.s390x",
                  "product_id": "MozillaFirefox-devel-45.8.0esr-102.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-45.8.0esr-102.1.s390x",
                "product": {
                  "name": "MozillaFirefox-45.8.0esr-102.1.s390x",
                  "product_id": "MozillaFirefox-45.8.0esr-102.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-45.8.0esr-102.1.s390x",
                "product": {
                  "name": "MozillaFirefox-translations-45.8.0esr-102.1.s390x",
                  "product_id": "MozillaFirefox-translations-45.8.0esr-102.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaFirefox-45.8.0esr-102.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-45.8.0esr-102.1.x86_64",
                  "product_id": "MozillaFirefox-45.8.0esr-102.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
                  "product_id": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
                "product": {
                  "name": "MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
                  "product_id": "MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.aarch64 as component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-devel-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-45.8.0esr-102.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64"
        },
        "product_reference": "MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-devel-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-devel-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP2",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2",
          "product_id": "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64"
        },
        "product_reference": "MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-5398",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5398"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5398",
          "url": "https://www.suse.com/security/cve/CVE-2017-5398"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028391 for CVE-2017-5398",
          "url": "https://bugzilla.suse.com/1028391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028393 for CVE-2017-5398",
          "url": "https://bugzilla.suse.com/1028393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:38:03Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5398"
    },
    {
      "cve": "CVE-2017-5400",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5400"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5400",
          "url": "https://www.suse.com/security/cve/CVE-2017-5400"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028391 for CVE-2017-5400",
          "url": "https://bugzilla.suse.com/1028391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028393 for CVE-2017-5400",
          "url": "https://bugzilla.suse.com/1028393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:38:03Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5400"
    },
    {
      "cve": "CVE-2017-5401",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5401"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A crash triggerable by web content in which an \"ErrorResult\" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5401",
          "url": "https://www.suse.com/security/cve/CVE-2017-5401"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028391 for CVE-2017-5401",
          "url": "https://bugzilla.suse.com/1028391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028393 for CVE-2017-5401",
          "url": "https://bugzilla.suse.com/1028393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:38:03Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5401"
    },
    {
      "cve": "CVE-2017-5402",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5402"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free can occur when events are fired for a \"FontFace\" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5402",
          "url": "https://www.suse.com/security/cve/CVE-2017-5402"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028391 for CVE-2017-5402",
          "url": "https://bugzilla.suse.com/1028391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028393 for CVE-2017-5402",
          "url": "https://bugzilla.suse.com/1028393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:38:03Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5402"
    },
    {
      "cve": "CVE-2017-5404",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5404"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5404",
          "url": "https://www.suse.com/security/cve/CVE-2017-5404"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028391 for CVE-2017-5404",
          "url": "https://bugzilla.suse.com/1028391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028393 for CVE-2017-5404",
          "url": "https://bugzilla.suse.com/1028393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:38:03Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5404"
    },
    {
      "cve": "CVE-2017-5405",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5405"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5405",
          "url": "https://www.suse.com/security/cve/CVE-2017-5405"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028391 for CVE-2017-5405",
          "url": "https://bugzilla.suse.com/1028391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028393 for CVE-2017-5405",
          "url": "https://bugzilla.suse.com/1028393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:38:03Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5405"
    },
    {
      "cve": "CVE-2017-5407",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5407"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Using SVG filters that don\u0027t use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information disclosure. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5407",
          "url": "https://www.suse.com/security/cve/CVE-2017-5407"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028391 for CVE-2017-5407",
          "url": "https://bugzilla.suse.com/1028391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028393 for CVE-2017-5407",
          "url": "https://bugzilla.suse.com/1028393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:38:03Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5407"
    },
    {
      "cve": "CVE-2017-5408",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5408"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5408",
          "url": "https://www.suse.com/security/cve/CVE-2017-5408"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028391 for CVE-2017-5408",
          "url": "https://bugzilla.suse.com/1028391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028393 for CVE-2017-5408",
          "url": "https://bugzilla.suse.com/1028393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:38:03Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5408"
    },
    {
      "cve": "CVE-2017-5409",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5409"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a special path to the callback parameter through the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR \u003c 45.8 and Firefox \u003c 52.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5409",
          "url": "https://www.suse.com/security/cve/CVE-2017-5409"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028391 for CVE-2017-5409",
          "url": "https://bugzilla.suse.com/1028391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028393 for CVE-2017-5409",
          "url": "https://bugzilla.suse.com/1028393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:38:03Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5409"
    },
    {
      "cve": "CVE-2017-5410",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5410"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for memory cleanup. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5410",
          "url": "https://www.suse.com/security/cve/CVE-2017-5410"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028391 for CVE-2017-5410",
          "url": "https://bugzilla.suse.com/1028391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1028393 for CVE-2017-5410",
          "url": "https://bugzilla.suse.com/1028393"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12:MozillaFirefox-translations-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:MozillaFirefox-devel-45.8.0esr-102.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP2:MozillaFirefox-devel-45.8.0esr-102.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:38:03Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-5410"
    }
  ]
}

CVE-2017-5410 (GCVE-0-2017-5410)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 14:55

Severity ?

CWE

Memory corruption during JavaScript garbage collection incremental sweeping

Summary

Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for memory cleanup. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

References

►

URL

Tags

	http://www.securityfocus.com/bid/96693	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2017-0459.html	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-09/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3832	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-07/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1330687	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-05/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037966	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201705-06	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0461.html	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2017/dsa-3805	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-06/	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0498.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201705-07	vendor-advisory, x_refsource_GENTOO

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 52

	Mozilla	Firefox ESR	Version: unspecified < 45.8
	Mozilla	Thunderbird	Version: unspecified < 52 Version: unspecified < 45.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:55:35.815Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96693",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96693"
          },
          {
            "name": "RHSA-2017:0459",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
          },
          {
            "name": "DSA-3832",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3832"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1330687"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
          },
          {
            "name": "1037966",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037966"
          },
          {
            "name": "GLSA-201705-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-06"
          },
          {
            "name": "RHSA-2017:0461",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
          },
          {
            "name": "DSA-3805",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3805"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
          },
          {
            "name": "RHSA-2017:0498",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
          },
          {
            "name": "GLSA-201705-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for memory cleanup. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory corruption during JavaScript garbage collection incremental sweeping",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "96693",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96693"
        },
        {
          "name": "RHSA-2017:0459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
        },
        {
          "name": "DSA-3832",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3832"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1330687"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
        },
        {
          "name": "1037966",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037966"
        },
        {
          "name": "GLSA-201705-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-06"
        },
        {
          "name": "RHSA-2017:0461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
        },
        {
          "name": "DSA-3805",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3805"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
        },
        {
          "name": "RHSA-2017:0498",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
        },
        {
          "name": "GLSA-201705-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5410",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how incremental sweeping is managed for memory cleanup. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Memory corruption during JavaScript garbage collection incremental sweeping"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96693",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96693"
            },
            {
              "name": "RHSA-2017:0459",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-09/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
            },
            {
              "name": "DSA-3832",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3832"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-07/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1330687",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1330687"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-05/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
            },
            {
              "name": "1037966",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037966"
            },
            {
              "name": "GLSA-201705-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-06"
            },
            {
              "name": "RHSA-2017:0461",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
            },
            {
              "name": "DSA-3805",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3805"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-06/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
            },
            {
              "name": "RHSA-2017:0498",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
            },
            {
              "name": "GLSA-201705-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5410",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T14:55:35.815Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5407 (GCVE-0-2017-5407)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 14:55

Severity ?

CWE

Pixel and history stealing via floating-point timing side channel with SVG filters

Summary

Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information disclosure. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

References

►

URL

Tags

	http://www.securityfocus.com/bid/96693	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2017-0459.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1336622	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-09/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3832	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-07/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-05/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037966	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201705-06	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0461.html	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2017/dsa-3805	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-06/	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0498.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201705-07	vendor-advisory, x_refsource_GENTOO

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 52

	Mozilla	Firefox ESR	Version: unspecified < 45.8
	Mozilla	Thunderbird	Version: unspecified < 52 Version: unspecified < 45.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:55:35.801Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96693",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96693"
          },
          {
            "name": "RHSA-2017:0459",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336622"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
          },
          {
            "name": "DSA-3832",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3832"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
          },
          {
            "name": "1037966",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037966"
          },
          {
            "name": "GLSA-201705-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-06"
          },
          {
            "name": "RHSA-2017:0461",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
          },
          {
            "name": "DSA-3805",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3805"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
          },
          {
            "name": "RHSA-2017:0498",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
          },
          {
            "name": "GLSA-201705-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Using SVG filters that don\u0027t use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information disclosure. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Pixel and history stealing via floating-point timing side channel with SVG filters",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "96693",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96693"
        },
        {
          "name": "RHSA-2017:0459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336622"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
        },
        {
          "name": "DSA-3832",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3832"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
        },
        {
          "name": "1037966",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037966"
        },
        {
          "name": "GLSA-201705-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-06"
        },
        {
          "name": "RHSA-2017:0461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
        },
        {
          "name": "DSA-3805",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3805"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
        },
        {
          "name": "RHSA-2017:0498",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
        },
        {
          "name": "GLSA-201705-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5407",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Using SVG filters that don\u0027t use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user. This can be used to extract history information and read text values across domains. This violates same-origin policy and leads to information disclosure. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Pixel and history stealing via floating-point timing side channel with SVG filters"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96693",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96693"
            },
            {
              "name": "RHSA-2017:0459",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336622",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336622"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-09/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
            },
            {
              "name": "DSA-3832",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3832"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-07/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-05/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
            },
            {
              "name": "1037966",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037966"
            },
            {
              "name": "GLSA-201705-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-06"
            },
            {
              "name": "RHSA-2017:0461",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
            },
            {
              "name": "DSA-3805",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3805"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-06/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
            },
            {
              "name": "RHSA-2017:0498",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
            },
            {
              "name": "GLSA-201705-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5407",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T14:55:35.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5401 (GCVE-0-2017-5401)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 14:55

Severity ?

CWE

Memory Corruption when handling ErrorResult

Summary

A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

References

►

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2017-0459.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/96677	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-09/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3832	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-07/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-05/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037966	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1328861	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201705-06	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0461.html	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2017/dsa-3805	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-06/	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0498.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201705-07	vendor-advisory, x_refsource_GENTOO

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 52

	Mozilla	Firefox ESR	Version: unspecified < 45.8
	Mozilla	Thunderbird	Version: unspecified < 52 Version: unspecified < 45.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:55:35.827Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:0459",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
          },
          {
            "name": "96677",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96677"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
          },
          {
            "name": "DSA-3832",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3832"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
          },
          {
            "name": "1037966",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037966"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1328861"
          },
          {
            "name": "GLSA-201705-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-06"
          },
          {
            "name": "RHSA-2017:0461",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
          },
          {
            "name": "DSA-3805",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3805"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
          },
          {
            "name": "RHSA-2017:0498",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
          },
          {
            "name": "GLSA-201705-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A crash triggerable by web content in which an \"ErrorResult\" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory Corruption when handling ErrorResult",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:0459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
        },
        {
          "name": "96677",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96677"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
        },
        {
          "name": "DSA-3832",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3832"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
        },
        {
          "name": "1037966",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037966"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1328861"
        },
        {
          "name": "GLSA-201705-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-06"
        },
        {
          "name": "RHSA-2017:0461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
        },
        {
          "name": "DSA-3805",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3805"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
        },
        {
          "name": "RHSA-2017:0498",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
        },
        {
          "name": "GLSA-201705-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5401",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A crash triggerable by web content in which an \"ErrorResult\" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Memory Corruption when handling ErrorResult"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:0459",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
            },
            {
              "name": "96677",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96677"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-09/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
            },
            {
              "name": "DSA-3832",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3832"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-07/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-05/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
            },
            {
              "name": "1037966",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037966"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1328861",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1328861"
            },
            {
              "name": "GLSA-201705-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-06"
            },
            {
              "name": "RHSA-2017:0461",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
            },
            {
              "name": "DSA-3805",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3805"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-06/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
            },
            {
              "name": "RHSA-2017:0498",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
            },
            {
              "name": "GLSA-201705-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5401",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T14:55:35.827Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5402 (GCVE-0-2017-5402)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 14:55

Severity ?

CWE

Use-after-free working with events in FontFace objects

Summary

A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1334876	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0459.html	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-09/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3832	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-07/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-05/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037966	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/96664	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201705-06	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0461.html	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2017/dsa-3805	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-06/	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0498.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201705-07	vendor-advisory, x_refsource_GENTOO

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 52

	Mozilla	Firefox ESR	Version: unspecified < 45.8
	Mozilla	Thunderbird	Version: unspecified < 52 Version: unspecified < 45.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:55:35.918Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1334876"
          },
          {
            "name": "RHSA-2017:0459",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
          },
          {
            "name": "DSA-3832",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3832"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
          },
          {
            "name": "1037966",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037966"
          },
          {
            "name": "96664",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96664"
          },
          {
            "name": "GLSA-201705-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-06"
          },
          {
            "name": "RHSA-2017:0461",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
          },
          {
            "name": "DSA-3805",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3805"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
          },
          {
            "name": "RHSA-2017:0498",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
          },
          {
            "name": "GLSA-201705-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free can occur when events are fired for a \"FontFace\" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free working with events in FontFace objects",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1334876"
        },
        {
          "name": "RHSA-2017:0459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
        },
        {
          "name": "DSA-3832",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3832"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
        },
        {
          "name": "1037966",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037966"
        },
        {
          "name": "96664",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96664"
        },
        {
          "name": "GLSA-201705-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-06"
        },
        {
          "name": "RHSA-2017:0461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
        },
        {
          "name": "DSA-3805",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3805"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
        },
        {
          "name": "RHSA-2017:0498",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
        },
        {
          "name": "GLSA-201705-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5402",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free can occur when events are fired for a \"FontFace\" object after the object has been already been destroyed while working with fonts. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free working with events in FontFace objects"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1334876",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1334876"
            },
            {
              "name": "RHSA-2017:0459",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-09/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
            },
            {
              "name": "DSA-3832",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3832"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-07/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-05/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
            },
            {
              "name": "1037966",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037966"
            },
            {
              "name": "96664",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96664"
            },
            {
              "name": "GLSA-201705-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-06"
            },
            {
              "name": "RHSA-2017:0461",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
            },
            {
              "name": "DSA-3805",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3805"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-06/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
            },
            {
              "name": "RHSA-2017:0498",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
            },
            {
              "name": "GLSA-201705-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5402",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T14:55:35.918Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5405 (GCVE-0-2017-5405)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 14:55

Severity ?

CWE

FTP response codes can cause use of uninitialized values for ports

Summary

Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

References

►

URL

Tags

	http://www.securityfocus.com/bid/96693	vdb-entry, x_refsource_BID
	https://bugzilla.mozilla.org/show_bug.cgi?id=1336699	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0459.html	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-09/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3832	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-07/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-05/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037966	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201705-06	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0461.html	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2017/dsa-3805	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-06/	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0498.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201705-07	vendor-advisory, x_refsource_GENTOO

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 52

	Mozilla	Firefox ESR	Version: unspecified < 45.8
	Mozilla	Thunderbird	Version: unspecified < 52 Version: unspecified < 45.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:55:35.801Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96693",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96693"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336699"
          },
          {
            "name": "RHSA-2017:0459",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
          },
          {
            "name": "DSA-3832",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3832"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
          },
          {
            "name": "1037966",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037966"
          },
          {
            "name": "GLSA-201705-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-06"
          },
          {
            "name": "RHSA-2017:0461",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
          },
          {
            "name": "DSA-3805",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3805"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
          },
          {
            "name": "RHSA-2017:0498",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
          },
          {
            "name": "GLSA-201705-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "FTP response codes can cause use of uninitialized values for ports",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "96693",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96693"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336699"
        },
        {
          "name": "RHSA-2017:0459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
        },
        {
          "name": "DSA-3832",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3832"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
        },
        {
          "name": "1037966",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037966"
        },
        {
          "name": "GLSA-201705-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-06"
        },
        {
          "name": "RHSA-2017:0461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
        },
        {
          "name": "DSA-3805",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3805"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
        },
        {
          "name": "RHSA-2017:0498",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
        },
        {
          "name": "GLSA-201705-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5405",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "FTP response codes can cause use of uninitialized values for ports"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96693",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96693"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336699",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336699"
            },
            {
              "name": "RHSA-2017:0459",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-09/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
            },
            {
              "name": "DSA-3832",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3832"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-07/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-05/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
            },
            {
              "name": "1037966",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037966"
            },
            {
              "name": "GLSA-201705-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-06"
            },
            {
              "name": "RHSA-2017:0461",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
            },
            {
              "name": "DSA-3805",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3805"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-06/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
            },
            {
              "name": "RHSA-2017:0498",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
            },
            {
              "name": "GLSA-201705-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5405",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T14:55:35.801Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5398 (GCVE-0-2017-5398)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 14:55

Severity ?

CWE

Memory safety bugs fixed in Thunderbird 45.8

Summary

Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

References

►

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2017-0459.html	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-09/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3832	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-07/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/96651	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-05/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037966	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1332550%2C1332597%2C1338383%2C1321612%2C1322971%2C1333568%2C1333887%2C1335450%2C1325052%2C1324379%2C1336510	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201705-06	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0461.html	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2017/dsa-3805	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-06/	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0498.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201705-07	vendor-advisory, x_refsource_GENTOO

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 52

	Mozilla	Firefox ESR	Version: unspecified < 45.8
	Mozilla	Thunderbird	Version: unspecified < 52 Version: unspecified < 45.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:55:35.821Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:0459",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
          },
          {
            "name": "DSA-3832",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3832"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
          },
          {
            "name": "96651",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96651"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
          },
          {
            "name": "1037966",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037966"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1332550%2C1332597%2C1338383%2C1321612%2C1322971%2C1333568%2C1333887%2C1335450%2C1325052%2C1324379%2C1336510"
          },
          {
            "name": "GLSA-201705-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-06"
          },
          {
            "name": "RHSA-2017:0461",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
          },
          {
            "name": "DSA-3805",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3805"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
          },
          {
            "name": "RHSA-2017:0498",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
          },
          {
            "name": "GLSA-201705-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Thunderbird 45.8",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:0459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
        },
        {
          "name": "DSA-3832",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3832"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
        },
        {
          "name": "96651",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96651"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
        },
        {
          "name": "1037966",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037966"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1332550%2C1332597%2C1338383%2C1321612%2C1322971%2C1333568%2C1333887%2C1335450%2C1325052%2C1324379%2C1336510"
        },
        {
          "name": "GLSA-201705-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-06"
        },
        {
          "name": "RHSA-2017:0461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
        },
        {
          "name": "DSA-3805",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3805"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
        },
        {
          "name": "RHSA-2017:0498",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
        },
        {
          "name": "GLSA-201705-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5398",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Memory safety bugs fixed in Thunderbird 45.8"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:0459",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-09/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
            },
            {
              "name": "DSA-3832",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3832"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-07/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
            },
            {
              "name": "96651",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96651"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-05/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
            },
            {
              "name": "1037966",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037966"
            },
            {
              "name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1332550%2C1332597%2C1338383%2C1321612%2C1322971%2C1333568%2C1333887%2C1335450%2C1325052%2C1324379%2C1336510",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1332550%2C1332597%2C1338383%2C1321612%2C1322971%2C1333568%2C1333887%2C1335450%2C1325052%2C1324379%2C1336510"
            },
            {
              "name": "GLSA-201705-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-06"
            },
            {
              "name": "RHSA-2017:0461",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
            },
            {
              "name": "DSA-3805",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3805"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-06/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
            },
            {
              "name": "RHSA-2017:0498",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
            },
            {
              "name": "GLSA-201705-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5398",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T14:55:35.821Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5400 (GCVE-0-2017-5400)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 14:55

Severity ?

CWE

asm.js JIT-spray bypass of ASLR and DEP

Summary

JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

References

►

URL

Tags

	http://www.securityfocus.com/bid/96654	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2017-0459.html	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-09/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3832	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-07/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-05/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037966	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201705-06	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0461.html	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2017/dsa-3805	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-06/	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0498.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201705-07	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1334933	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 52

	Mozilla	Firefox ESR	Version: unspecified < 45.8
	Mozilla	Thunderbird	Version: unspecified < 52 Version: unspecified < 45.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:55:35.815Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96654",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96654"
          },
          {
            "name": "RHSA-2017:0459",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
          },
          {
            "name": "DSA-3832",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3832"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
          },
          {
            "name": "1037966",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037966"
          },
          {
            "name": "GLSA-201705-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-06"
          },
          {
            "name": "RHSA-2017:0461",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
          },
          {
            "name": "DSA-3805",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3805"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
          },
          {
            "name": "RHSA-2017:0498",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
          },
          {
            "name": "GLSA-201705-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-07"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1334933"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "asm.js JIT-spray bypass of ASLR and DEP",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "96654",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96654"
        },
        {
          "name": "RHSA-2017:0459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
        },
        {
          "name": "DSA-3832",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3832"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
        },
        {
          "name": "1037966",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037966"
        },
        {
          "name": "GLSA-201705-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-06"
        },
        {
          "name": "RHSA-2017:0461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
        },
        {
          "name": "DSA-3805",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3805"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
        },
        {
          "name": "RHSA-2017:0498",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
        },
        {
          "name": "GLSA-201705-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-07"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1334933"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5400",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "asm.js JIT-spray bypass of ASLR and DEP"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96654",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96654"
            },
            {
              "name": "RHSA-2017:0459",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-09/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
            },
            {
              "name": "DSA-3832",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3832"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-07/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-05/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
            },
            {
              "name": "1037966",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037966"
            },
            {
              "name": "GLSA-201705-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-06"
            },
            {
              "name": "RHSA-2017:0461",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
            },
            {
              "name": "DSA-3805",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3805"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-06/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
            },
            {
              "name": "RHSA-2017:0498",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
            },
            {
              "name": "GLSA-201705-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-07"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1334933",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1334933"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5400",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T14:55:35.815Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5408 (GCVE-0-2017-5408)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 14:55

Severity ?

CWE

Cross-origin reading of video captions in violation of CORS

Summary

Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

References

►

URL

Tags

	https://bugzilla.mozilla.org/show_bug.cgi?id=1313711	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/96693	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2017-0459.html	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-09/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3832	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-07/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-05/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037966	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201705-06	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0461.html	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2017/dsa-3805	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-06/	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0498.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201705-07	vendor-advisory, x_refsource_GENTOO

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 52

	Mozilla	Firefox ESR	Version: unspecified < 45.8
	Mozilla	Thunderbird	Version: unspecified < 52 Version: unspecified < 45.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:55:35.911Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1313711"
          },
          {
            "name": "96693",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96693"
          },
          {
            "name": "RHSA-2017:0459",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
          },
          {
            "name": "DSA-3832",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3832"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
          },
          {
            "name": "1037966",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037966"
          },
          {
            "name": "GLSA-201705-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-06"
          },
          {
            "name": "RHSA-2017:0461",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
          },
          {
            "name": "DSA-3805",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3805"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
          },
          {
            "name": "RHSA-2017:0498",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
          },
          {
            "name": "GLSA-201705-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Cross-origin reading of video captions in violation of CORS",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1313711"
        },
        {
          "name": "96693",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96693"
        },
        {
          "name": "RHSA-2017:0459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
        },
        {
          "name": "DSA-3832",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3832"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
        },
        {
          "name": "1037966",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037966"
        },
        {
          "name": "GLSA-201705-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-06"
        },
        {
          "name": "RHSA-2017:0461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
        },
        {
          "name": "DSA-3805",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3805"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
        },
        {
          "name": "RHSA-2017:0498",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
        },
        {
          "name": "GLSA-201705-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5408",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading to potential information disclosure for video captions. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Cross-origin reading of video captions in violation of CORS"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1313711",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1313711"
            },
            {
              "name": "96693",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96693"
            },
            {
              "name": "RHSA-2017:0459",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-09/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
            },
            {
              "name": "DSA-3832",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3832"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-07/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-05/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
            },
            {
              "name": "1037966",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037966"
            },
            {
              "name": "GLSA-201705-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-06"
            },
            {
              "name": "RHSA-2017:0461",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
            },
            {
              "name": "DSA-3805",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3805"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-06/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
            },
            {
              "name": "RHSA-2017:0498",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
            },
            {
              "name": "GLSA-201705-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5408",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T14:55:35.911Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5409 (GCVE-0-2017-5409)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 14:55

Severity ?

CWE

File deletion via callback parameter in Mozilla Windows Updater and Maintenance Service

Summary

The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a special path to the callback parameter through the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 45.8 and Firefox < 52.

References

►

URL

Tags

	http://www.securityfocus.com/bid/96696	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-05/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037966	vdb-entry, x_refsource_SECTRACK
	https://www.mozilla.org/security/advisories/mfsa2017-06/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1321814	x_refsource_CONFIRM

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox ESR

Version: unspecified < 45.8

Mozilla

Firefox

Version: unspecified < 52

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:55:35.846Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96696",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96696"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
          },
          {
            "name": "1037966",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037966"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1321814"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a special path to the callback parameter through the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR \u003c 45.8 and Firefox \u003c 52."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "File deletion via callback parameter in Mozilla Windows Updater and Maintenance Service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "96696",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96696"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
        },
        {
          "name": "1037966",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037966"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1321814"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5409",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Mozilla Windows updater can be called by a non-privileged user to delete an arbitrary local file by passing a special path to the callback parameter through the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR \u003c 45.8 and Firefox \u003c 52."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "File deletion via callback parameter in Mozilla Windows Updater and Maintenance Service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96696",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96696"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-05/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
            },
            {
              "name": "1037966",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037966"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-06/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1321814",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1321814"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5409",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T14:55:35.846Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-5404 (GCVE-0-2017-5404)

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 14:55

Severity ?

CWE

Use-after-free working with ranges in selections

Summary

A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox < 52, Firefox ESR < 45.8, Thunderbird < 52, and Thunderbird < 45.8.

References

►

URL

Tags

	https://www.exploit-db.com/exploits/41660/	exploit, x_refsource_EXPLOIT-DB
	http://rhn.redhat.com/errata/RHSA-2017-0459.html	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-09/	x_refsource_CONFIRM
	https://www.debian.org/security/2017/dsa-3832	vendor-advisory, x_refsource_DEBIAN
	https://bugzilla.mozilla.org/show_bug.cgi?id=1340138	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-07/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-05/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037966	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/96664	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201705-06	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0461.html	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2017/dsa-3805	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-06/	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0498.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201705-07	vendor-advisory, x_refsource_GENTOO

Impacted products

Vendor

Product

Version

►

Mozilla

Firefox

Version: unspecified < 52

	Mozilla	Firefox ESR	Version: unspecified < 45.8
	Mozilla	Thunderbird	Version: unspecified < 52 Version: unspecified < 45.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:55:35.916Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "41660",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/41660/"
          },
          {
            "name": "RHSA-2017:0459",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
          },
          {
            "name": "DSA-3832",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3832"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1340138"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
          },
          {
            "name": "1037966",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037966"
          },
          {
            "name": "96664",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96664"
          },
          {
            "name": "GLSA-201705-06",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-06"
          },
          {
            "name": "RHSA-2017:0461",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
          },
          {
            "name": "DSA-3805",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3805"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
          },
          {
            "name": "RHSA-2017:0498",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
          },
          {
            "name": "GLSA-201705-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "45.8",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-03-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free working with ranges in selections",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "41660",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/41660/"
        },
        {
          "name": "RHSA-2017:0459",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
        },
        {
          "name": "DSA-3832",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3832"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1340138"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
        },
        {
          "name": "1037966",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037966"
        },
        {
          "name": "96664",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96664"
        },
        {
          "name": "GLSA-201705-06",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-06"
        },
        {
          "name": "RHSA-2017:0461",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
        },
        {
          "name": "DSA-3805",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3805"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
        },
        {
          "name": "RHSA-2017:0498",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
        },
        {
          "name": "GLSA-201705-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5404",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of it. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 52, Firefox ESR \u003c 45.8, Thunderbird \u003c 52, and Thunderbird \u003c 45.8."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free working with ranges in selections"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "41660",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/41660/"
            },
            {
              "name": "RHSA-2017:0459",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0459.html"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-09/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-09/"
            },
            {
              "name": "DSA-3832",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3832"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1340138",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1340138"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-07/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-07/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-05/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-05/"
            },
            {
              "name": "1037966",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037966"
            },
            {
              "name": "96664",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96664"
            },
            {
              "name": "GLSA-201705-06",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-06"
            },
            {
              "name": "RHSA-2017:0461",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0461.html"
            },
            {
              "name": "DSA-3805",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3805"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-06/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-06/"
            },
            {
              "name": "RHSA-2017:0498",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0498.html"
            },
            {
              "name": "GLSA-201705-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5404",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T14:55:35.916Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2017:0714-1

Vulnerability from csaf_suse

CVE-2017-5410 (GCVE-0-2017-5410)

Vulnerability from cvelistv5

CVE-2017-5407 (GCVE-0-2017-5407)

Vulnerability from cvelistv5

CVE-2017-5401 (GCVE-0-2017-5401)

Vulnerability from cvelistv5

CVE-2017-5402 (GCVE-0-2017-5402)

Vulnerability from cvelistv5

CVE-2017-5405 (GCVE-0-2017-5405)

Vulnerability from cvelistv5

CVE-2017-5398 (GCVE-0-2017-5398)

Vulnerability from cvelistv5

CVE-2017-5400 (GCVE-0-2017-5400)

Vulnerability from cvelistv5

CVE-2017-5408 (GCVE-0-2017-5408)

Vulnerability from cvelistv5

CVE-2017-5409 (GCVE-0-2017-5409)

Vulnerability from cvelistv5

CVE-2017-5404 (GCVE-0-2017-5404)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature