CVE Vulnerabilities

CVE-2017-5455

Published: Jun 11, 2018 | Modified: Oct 03, 2019
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.

Affected Software

Name Vendor Start Version End Version
Enterprise_linux Redhat 7.0 (including) 7.0 (including)
Enterprise_linux_desktop Redhat 7.0 (including) 7.0 (including)
Enterprise_linux_server Redhat 7.0 (including) 7.0 (including)
Enterprise_linux_server_aus Redhat 7.3 (including) 7.3 (including)
Enterprise_linux_server_aus Redhat 7.4 (including) 7.4 (including)
Enterprise_linux_server_eus Redhat 7.3 (including) 7.3 (including)
Enterprise_linux_server_eus Redhat 7.4 (including) 7.4 (including)
Enterprise_linux_server_eus Redhat 7.5 (including) 7.5 (including)
Enterprise_linux_workstation Redhat 7.0 (including) 7.0 (including)

References