CVE-2017-5373

Memory safety bugs were reported in Firefox 50.1 and Firefox ESR 45.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.

• CWE-119

• http://rhn.redhat.com/errata/RHSA-2017-0190.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0238.htmlThird Party Advisory
• http://www.securityfocus.com/bid/95762Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037693Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1322315%2C1328834%2C1322420%2C1285833%2C1285960%2C1328251%2C1331058%2C1325938%2C1325877Issue Tracking
• https://security.gentoo.org/glsa/201702-13Third Party Advisory
• https://security.gentoo.org/glsa/201702-22Third Party Advisory
• https://www.debian.org/security/2017/dsa-3771Third Party Advisory
• https://www.debian.org/security/2017/dsa-3832Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-01/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-02/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-03/Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0190.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0238.htmlThird Party Advisory
• http://www.securityfocus.com/bid/95762Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037693Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1322315%2C1328834%2C1322420%2C1285833%2C1285960%2C1328251%2C1331058%2C1325938%2C1325877Issue Tracking
• https://security.gentoo.org/glsa/201702-13Third Party Advisory
• https://security.gentoo.org/glsa/201702-22Third Party Advisory
• https://www.debian.org/security/2017/dsa-3771Third Party Advisory
• https://www.debian.org/security/2017/dsa-3832Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-01/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-02/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-03/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5361Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14,…
• CVE-2017-5364Memory Corruption Vulnerability in Foxit PDF Toolkit v1.3 al…
• CVE-2017-5367Multiple reflected XSS vulnerabilities exist within form and…
• CVE-2017-5368ZoneMinder v1.30 and v1.29, an open-source CCTV server web a…
• CVE-2017-5371Odata Server in SAP Adaptive Server Enterprise (ASE) 16 allo…
• CVE-2017-5372The function msp (aka MSPRuntimeInterface) in the P4 SERVERC…
• CVE-2017-5374Memory safety bugs were reported in Firefox 50.1. Some of th…
• CVE-2017-5375JIT code allocation can allow for a bypass of ASLR and DEP p…
• CVE-2017-5376Use-after-free while manipulating XSL in XSLT documents. Thi…
• CVE-2017-5377A memory corruption vulnerability in Skia that can occur whe…
• CVE-2017-5378Hashed codes of JavaScript objects are shared between pages.…
• CVE-2017-5379Use-after-free vulnerability in Web Animations when interact…