CVE-2017-5470

Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

• CWE-119

• http://www.securityfocus.com/bid/99041Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038689Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:1440Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1561Third Party Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1359639%2C1349595%2C1352295%2C1352556%2C1342552%2C1342567%2C1346012%2C1366140%2C1368732%2C1297111%2C1362590%2C1357462%2C1363280%2C1349266%2C1352093%2C1348424%2C1347748%2C1356025%2C1325513%2C1367692Issue Tracking, Vendor Advisory
• https://www.debian.org/security/2017/dsa-3881Third Party Advisory
• https://www.debian.org/security/2017/dsa-3918Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-15/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-16/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-17/Vendor Advisory
• http://www.securityfocus.com/bid/99041Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038689Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:1440Third Party Advisory
• https://access.redhat.com/errata/RHSA-2017:1561Third Party Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1359639%2C1349595%2C1352295%2C1352556%2C1342552%2C1342567%2C1346012%2C1366140%2C1368732%2C1297111%2C1362590%2C1357462%2C1363280%2C1349266%2C1352093%2C1348424%2C1347748%2C1356025%2C1325513%2C1367692Issue Tracking, Vendor Advisory
• https://www.debian.org/security/2017/dsa-3881Third Party Advisory
• https://www.debian.org/security/2017/dsa-3918Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-15/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-16/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-17/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5464During DOM manipulations of the accessibility tree through s…
• CVE-2017-5465An out-of-bounds read while processing SVG content in "Convo…
• CVE-2017-5466If a page is loaded from an original site through a hyperlin…
• CVE-2017-5467A potential memory corruption and crash when using Skia cont…
• CVE-2017-5468An issue with incorrect ownership model of "privateBrowsing"…
• CVE-2017-5469Fixed potential buffer overflows in generated Firefox code d…
• CVE-2017-5471Memory safety bugs were reported in Firefox 53. Some of thes…
• CVE-2017-5472A use-after-free vulnerability with the frameloader during t…
• CVE-2017-5473Cross-site request forgery (CSRF) vulnerability in ntopng th…
• CVE-2017-5474Open redirect vulnerability in comment.php in Serendipity th…
• CVE-2017-5475comment.php in Serendipity through 2.0.5 allows CSRF in dele…
• CVE-2017-5476Serendipity through 2.0.5 allows CSRF for the installation o…