Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2017-7786
Vulnerability from cvelistv5
Published
2018-06-11 21:00
Modified
2024-08-05 16:12
Severity ?
EPSS score ?
Summary
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
References
Impacted products
Vendor | Product | Version | |||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
▼ | Mozilla | Thunderbird |
Version: unspecified < 52.3 |
||||||||
|
{ containers: { adp: [ { providerMetadata: { dateUpdated: "2024-08-05T16:12:28.346Z", orgId: "af854a3a-2127-422b-91ae-364da2661108", shortName: "CVE", }, references: [ { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://www.mozilla.org/security/advisories/mfsa2017-19/", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://www.mozilla.org/security/advisories/mfsa2017-20/", }, { name: "DSA-3968", tags: [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred", ], url: "https://www.debian.org/security/2017/dsa-3968", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189", }, { tags: [ "x_refsource_CONFIRM", "x_transferred", ], url: "https://www.mozilla.org/security/advisories/mfsa2017-18/", }, { name: "RHSA-2017:2456", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "https://access.redhat.com/errata/RHSA-2017:2456", }, { name: "RHSA-2017:2534", tags: [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred", ], url: "https://access.redhat.com/errata/RHSA-2017:2534", }, { name: "100206", tags: [ "vdb-entry", "x_refsource_BID", "x_transferred", ], url: "http://www.securityfocus.com/bid/100206", }, { name: "1039124", tags: [ "vdb-entry", "x_refsource_SECTRACK", "x_transferred", ], url: "http://www.securitytracker.com/id/1039124", }, { name: "GLSA-201803-14", tags: [ "vendor-advisory", "x_refsource_GENTOO", "x_transferred", ], url: "https://security.gentoo.org/glsa/201803-14", }, { name: "DSA-3928", tags: [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred", ], url: "https://www.debian.org/security/2017/dsa-3928", }, ], title: "CVE Program Container", }, ], cna: { affected: [ { product: "Thunderbird", vendor: "Mozilla", versions: [ { lessThan: "52.3", status: "affected", version: "unspecified", versionType: "custom", }, ], }, { product: "Firefox ESR", vendor: "Mozilla", versions: [ { lessThan: "52.3", status: "affected", version: "unspecified", versionType: "custom", }, ], }, { product: "Firefox", vendor: "Mozilla", versions: [ { lessThan: "55", status: "affected", version: "unspecified", versionType: "custom", }, ], }, ], datePublic: "2017-08-08T00:00:00", descriptions: [ { lang: "en", value: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", }, ], problemTypes: [ { descriptions: [ { description: "Buffer overflow while painting non-displayable SVG", lang: "en", type: "text", }, ], }, ], providerMetadata: { dateUpdated: "2018-06-12T09:57:01", orgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe", shortName: "mozilla", }, references: [ { tags: [ "x_refsource_CONFIRM", ], url: "https://www.mozilla.org/security/advisories/mfsa2017-19/", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://www.mozilla.org/security/advisories/mfsa2017-20/", }, { name: "DSA-3968", tags: [ "vendor-advisory", "x_refsource_DEBIAN", ], url: "https://www.debian.org/security/2017/dsa-3968", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189", }, { tags: [ "x_refsource_CONFIRM", ], url: "https://www.mozilla.org/security/advisories/mfsa2017-18/", }, { name: "RHSA-2017:2456", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "https://access.redhat.com/errata/RHSA-2017:2456", }, { name: "RHSA-2017:2534", tags: [ "vendor-advisory", "x_refsource_REDHAT", ], url: "https://access.redhat.com/errata/RHSA-2017:2534", }, { name: "100206", tags: [ "vdb-entry", "x_refsource_BID", ], url: "http://www.securityfocus.com/bid/100206", }, { name: "1039124", tags: [ "vdb-entry", "x_refsource_SECTRACK", ], url: "http://www.securitytracker.com/id/1039124", }, { name: "GLSA-201803-14", tags: [ "vendor-advisory", "x_refsource_GENTOO", ], url: "https://security.gentoo.org/glsa/201803-14", }, { name: "DSA-3928", tags: [ "vendor-advisory", "x_refsource_DEBIAN", ], url: "https://www.debian.org/security/2017/dsa-3928", }, ], x_legacyV4Record: { CVE_data_meta: { ASSIGNER: "security@mozilla.org", ID: "CVE-2017-7786", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Thunderbird", version: { version_data: [ { version_affected: "<", version_value: "52.3", }, ], }, }, { product_name: "Firefox ESR", version: { version_data: [ { version_affected: "<", version_value: "52.3", }, ], }, }, { product_name: "Firefox", version: { version_data: [ { version_affected: "<", version_value: "55", }, ], }, }, ], }, vendor_name: "Mozilla", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "Buffer overflow while painting non-displayable SVG", }, ], }, ], }, references: { reference_data: [ { name: "https://www.mozilla.org/security/advisories/mfsa2017-19/", refsource: "CONFIRM", url: "https://www.mozilla.org/security/advisories/mfsa2017-19/", }, { name: "https://www.mozilla.org/security/advisories/mfsa2017-20/", refsource: "CONFIRM", url: "https://www.mozilla.org/security/advisories/mfsa2017-20/", }, { name: "DSA-3968", refsource: "DEBIAN", url: "https://www.debian.org/security/2017/dsa-3968", }, { name: "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189", refsource: "CONFIRM", url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189", }, { name: "https://www.mozilla.org/security/advisories/mfsa2017-18/", refsource: "CONFIRM", url: "https://www.mozilla.org/security/advisories/mfsa2017-18/", }, { name: "RHSA-2017:2456", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2017:2456", }, { name: "RHSA-2017:2534", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2017:2534", }, { name: "100206", refsource: "BID", url: "http://www.securityfocus.com/bid/100206", }, { name: "1039124", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1039124", }, { name: "GLSA-201803-14", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201803-14", }, { name: "DSA-3928", refsource: "DEBIAN", url: "https://www.debian.org/security/2017/dsa-3928", }, ], }, }, }, }, cveMetadata: { assignerOrgId: "f16b083a-5664-49f3-a51e-8d479e5ed7fe", assignerShortName: "mozilla", cveId: "CVE-2017-7786", datePublished: "2018-06-11T21:00:00", dateReserved: "2017-04-12T00:00:00", dateUpdated: "2024-08-05T16:12:28.346Z", state: "PUBLISHED", }, dataType: "CVE_RECORD", dataVersion: "5.1", "vulnerability-lookup:meta": { nvd: "{\"cve\":{\"id\":\"CVE-2017-7786\",\"sourceIdentifier\":\"security@mozilla.org\",\"published\":\"2018-06-11T21:29:09.170\",\"lastModified\":\"2024-11-21T03:32:39.507\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.\"},{\"lang\":\"es\",\"value\":\"Puede ocurrir un desbordamiento de búfer cuando el renderizador de imagen intenta pintar elementos SVG no mostrables. Esto resulta en un cierre inesperado potencialmente explotable. La vulnerabilidad afecta a Thunderbird en versiones anteriores a la 52.3, Firefox ESR en versiones anteriores a la 52.3 y Firefox en versiones anteriores a la 55.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":true,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D8B549B-E57B-4DFE-8A13-CAB06B5356B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"142AD0DD-4CF3-4D74-9442-459CE3347E3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"133AAFA7-AF42-4D7B-8822-AA2E85611BF5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33C068A4-3780-4EAB-A937-6082DF847564\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54D669D4-6D7E-449D-80C1-28FA44F06FFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9BBCD86A-E6C7-4444-9D74-F861084090F0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EF4996-72F4-4FA4-814F-F5991E7A8318\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98381E61-F082-4302-B51F-5648884F998B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D99A687E-EAE6-417E-A88E-D0082BC194CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8442C20-41F9-47FD-9A12-E724D3A31FD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9EC0D196-F7B8-4BDD-9050-779F7A7FBEE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0AC5CD5-6E58-433C-9EB3-6DFE5656463E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5ED5807-55B7-47C5-97A6-03233F4FBC3A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"825ECE2D-E232-46E0-A047-074B34DB1E97\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"52.0\",\"versionEndExcluding\":\"52.1.0\",\"matchCriteriaId\":\"EE6829EF-1620-42AA-A43B-5336E8357B68\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"52.3\",\"matchCriteriaId\":\"4C4159A4-3422-411F-A74A-14D007B5BDED\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"55.0\",\"matchCriteriaId\":\"4E741DB2-0D96-41AD-A083-544CAFD70780\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"52.3\",\"matchCriteriaId\":\"37697885-01C6-4905-8932-3FFCD7A78753\"}]}]}],\"references\":[{\"url\":\"http://www.securityfocus.com/bid/100206\",\"source\":\"security@mozilla.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039124\",\"source\":\"security@mozilla.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2456\",\"source\":\"security@mozilla.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2534\",\"source\":\"security@mozilla.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1365189\",\"source\":\"security@mozilla.org\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201803-14\",\"source\":\"security@mozilla.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2017/dsa-3928\",\"source\":\"security@mozilla.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2017/dsa-3968\",\"source\":\"security@mozilla.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2017-18/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2017-19/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2017-20/\",\"source\":\"security@mozilla.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.securityfocus.com/bid/100206\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1039124\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2456\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:2534\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.mozilla.org/show_bug.cgi?id=1365189\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\",\"Vendor Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/201803-14\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2017/dsa-3928\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2017/dsa-3968\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2017-18/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2017-19/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.mozilla.org/security/advisories/mfsa2017-20/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}", }, }
RHSA-2017:2456
Vulnerability from csaf_redhat
Published
2017-08-10 23:20
Modified
2025-01-05 18:54
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Mozilla Firefox is an open source web browser.
This update upgrades Firefox to version 52.3.0 ESR.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2017-7779, CVE-2017-7798, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)
Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Frederik Braun, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open source web browser.\n\nThis update upgrades Firefox to version 52.3.0 ESR.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2017-7779, CVE-2017-7798, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)\n\nRed Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Frederik Braun, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2017:2456", url: "https://access.redhat.com/errata/RHSA-2017:2456", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#critical", url: "https://access.redhat.com/security/updates/classification/#critical", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/", }, { category: "external", summary: "1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "1479213", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479213", }, { category: "external", summary: "1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2456.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-05T18:54:59+00:00", generator: { date: "2025-01-05T18:54:59+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.5", }, }, id: "RHSA-2017:2456", initial_release_date: "2017-08-10T23:20:02+00:00", revision_history: [ { date: "2017-08-10T23:20:02+00:00", number: "1", summary: "Initial version", }, { date: "2017-08-10T23:20:02+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-05T18:54:59+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Client Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux HPC Node Optional (v. 6)", product: { name: "Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::computenode", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.x86_64", product: { name: "firefox-0:52.3.0-2.el7_4.x86_64", product_id: "firefox-0:52.3.0-2.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.x86_64", product: { name: "firefox-0:52.3.0-3.el6_9.x86_64", product_id: "firefox-0:52.3.0-3.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.src", product: { name: "firefox-0:52.3.0-2.el7_4.src", product_id: "firefox-0:52.3.0-2.el7_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=src", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.src", product: { name: "firefox-0:52.3.0-3.el6_9.src", product_id: "firefox-0:52.3.0-3.el6_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=i686", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.i686", product: { name: "firefox-0:52.3.0-2.el7_4.i686", product_id: "firefox-0:52.3.0-2.el7_4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=i686", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=i686", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.i686", product: { name: "firefox-0:52.3.0-3.el6_9.i686", product_id: "firefox-0:52.3.0-3.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.s390x", product: { name: "firefox-0:52.3.0-2.el7_4.s390x", product_id: "firefox-0:52.3.0-2.el7_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=s390x", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.s390x", product: { name: "firefox-0:52.3.0-3.el6_9.s390x", product_id: "firefox-0:52.3.0-3.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.ppc64", product: { name: "firefox-0:52.3.0-2.el7_4.ppc64", product_id: "firefox-0:52.3.0-2.el7_4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.ppc64", product: { name: "firefox-0:52.3.0-3.el6_9.ppc64", product_id: "firefox-0:52.3.0-3.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.ppc64le", product: { name: "firefox-0:52.3.0-2.el7_4.ppc64le", product_id: "firefox-0:52.3.0-2.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=ppc", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.ppc", product: { name: "firefox-0:52.3.0-2.el7_4.ppc", product_id: "firefox-0:52.3.0-2.el7_4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=ppc", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=ppc", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.ppc", product: { name: "firefox-0:52.3.0-3.el6_9.ppc", product_id: "firefox-0:52.3.0-3.el6_9.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=s390", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.s390", product: { name: "firefox-0:52.3.0-2.el7_4.s390", product_id: "firefox-0:52.3.0-2.el7_4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=s390", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=s390", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.s390", product: { name: "firefox-0:52.3.0-3.el6_9.s390", product_id: "firefox-0:52.3.0-3.el6_9.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "SkyLined", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7753", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479188", }, ], notes: [ { category: "description", text: "An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7753", }, { category: "external", summary: "RHBZ#1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7753", url: "https://www.cve.org/CVERecord?id=CVE-2017-7753", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.1, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7779", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479191", }, ], notes: [ { category: "description", text: "Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7779", }, { category: "external", summary: "RHBZ#1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7779", url: "https://www.cve.org/CVERecord?id=CVE-2017-7779", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7784", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479201", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7784", }, { category: "external", summary: "RHBZ#1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7784", url: "https://www.cve.org/CVERecord?id=CVE-2017-7784", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7785", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479203", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7785", }, { category: "external", summary: "RHBZ#1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7785", url: "https://www.cve.org/CVERecord?id=CVE-2017-7785", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7786", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479205", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7786", }, { category: "external", summary: "RHBZ#1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7786", url: "https://www.cve.org/CVERecord?id=CVE-2017-7786", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Oliver Wagner", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7787", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479206", }, ], notes: [ { category: "description", text: "Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7787", }, { category: "external", summary: "RHBZ#1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7787", url: "https://www.cve.org/CVERecord?id=CVE-2017-7787", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Jose María Acuña", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7791", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479209", }, ], notes: [ { category: "description", text: "On pages containing an iframe, the \"data:\" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7791", }, { category: "external", summary: "RHBZ#1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7791", url: "https://www.cve.org/CVERecord?id=CVE-2017-7791", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Fraser Tweedale", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7792", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479210", }, ], notes: [ { category: "description", text: "A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7792", }, { category: "external", summary: "RHBZ#1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7792", url: "https://www.cve.org/CVERecord?id=CVE-2017-7792", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Frederik Braun", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7798", cwe: { id: "CWE-77", name: "Improper Neutralization of Special Elements used in a Command ('Command Injection')", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479213", }, ], notes: [ { category: "description", text: "The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR < 52.3 and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: XUL injection in the style editor in devtools (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7798", }, { category: "external", summary: "RHBZ#1479213", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479213", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7798", url: "https://www.cve.org/CVERecord?id=CVE-2017-7798", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7798", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7798", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7798", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7798", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: XUL injection in the style editor in devtools (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Looben Yang", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7800", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479218", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7800", }, { category: "external", summary: "RHBZ#1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7800", url: "https://www.cve.org/CVERecord?id=CVE-2017-7800", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7801", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479223", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur while re-computing layout for a \"marquee\" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with marquee during window resizing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7801", }, { category: "external", summary: "RHBZ#1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7801", url: "https://www.cve.org/CVERecord?id=CVE-2017-7801", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: Use-after-free with marquee during window resizing", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7802", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479224", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7802", }, { category: "external", summary: "RHBZ#1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7802", url: "https://www.cve.org/CVERecord?id=CVE-2017-7802", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Rhys Enniks", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7803", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479225", }, ], notes: [ { category: "description", text: "When a page's content security policy (CSP) header contains a \"sandbox\" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7803", }, { category: "external", summary: "RHBZ#1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7803", url: "https://www.cve.org/CVERecord?id=CVE-2017-7803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mathias Karlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7807", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479227", }, ], notes: [ { category: "description", text: "A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7807", }, { category: "external", summary: "RHBZ#1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7807", url: "https://www.cve.org/CVERecord?id=CVE-2017-7807", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "The Mozilla Project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7809", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479650", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7809", }, { category: "external", summary: "RHBZ#1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7809", url: "https://www.cve.org/CVERecord?id=CVE-2017-7809", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", }, ], release_date: "2017-08-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", }, ], }
rhsa-2017_2534
Vulnerability from csaf_redhat
Published
2017-08-24 06:45
Modified
2025-01-05 18:55
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 52.3.0.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2017-7779, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)
Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 52.3.0.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2017-7779, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)\n\nRed Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2017:2534", url: "https://access.redhat.com/errata/RHSA-2017:2534", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-20/", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-20/", }, { category: "external", summary: "1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2534.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-05T18:55:04+00:00", generator: { date: "2025-01-05T18:55:04+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.5", }, }, id: "RHSA-2017:2534", initial_release_date: "2017-08-24T06:45:27+00:00", revision_history: [ { date: "2017-08-24T06:45:27+00:00", number: "1", summary: "Initial version", }, { date: "2017-08-24T06:45:27+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-05T18:55:04+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.x86_64", product: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64", product_id: "thunderbird-0:52.3.0-1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el7_4?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.x86_64", product: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64", product_id: "thunderbird-0:52.3.0-1.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.src", product: { name: "thunderbird-0:52.3.0-1.el6_9.src", product_id: "thunderbird-0:52.3.0-1.el6_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=src", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.src", product: { name: "thunderbird-0:52.3.0-1.el7_4.src", product_id: "thunderbird-0:52.3.0-1.el7_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.i686", product: { name: "thunderbird-0:52.3.0-1.el6_9.i686", product_id: "thunderbird-0:52.3.0-1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=i686", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.s390x", product: { name: "thunderbird-0:52.3.0-1.el6_9.s390x", product_id: "thunderbird-0:52.3.0-1.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.ppc64", product: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64", product_id: "thunderbird-0:52.3.0-1.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=ppc64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", product_id: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el7_4?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.ppc64le", product: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le", product_id: "thunderbird-0:52.3.0-1.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el7_4?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.aarch64", product: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64", product_id: "thunderbird-0:52.3.0-1.el7_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.src", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.src", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.src", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.src", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.src", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.src", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "SkyLined", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7753", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479188", }, ], notes: [ { category: "description", text: "An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7753", }, { category: "external", summary: "RHBZ#1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7753", url: "https://www.cve.org/CVERecord?id=CVE-2017-7753", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.1, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7779", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479191", }, ], notes: [ { category: "description", text: "Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7779", }, { category: "external", summary: "RHBZ#1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7779", url: "https://www.cve.org/CVERecord?id=CVE-2017-7779", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7784", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479201", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7784", }, { category: "external", summary: "RHBZ#1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7784", url: "https://www.cve.org/CVERecord?id=CVE-2017-7784", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7785", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479203", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7785", }, { category: "external", summary: "RHBZ#1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7785", url: "https://www.cve.org/CVERecord?id=CVE-2017-7785", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7786", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479205", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7786", }, { category: "external", summary: "RHBZ#1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7786", url: "https://www.cve.org/CVERecord?id=CVE-2017-7786", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Oliver Wagner", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7787", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479206", }, ], notes: [ { category: "description", text: "Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7787", }, { category: "external", summary: "RHBZ#1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7787", url: "https://www.cve.org/CVERecord?id=CVE-2017-7787", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Jose María Acuña", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7791", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479209", }, ], notes: [ { category: "description", text: "On pages containing an iframe, the \"data:\" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7791", }, { category: "external", summary: "RHBZ#1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7791", url: "https://www.cve.org/CVERecord?id=CVE-2017-7791", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Fraser Tweedale", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7792", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479210", }, ], notes: [ { category: "description", text: "A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7792", }, { category: "external", summary: "RHBZ#1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7792", url: "https://www.cve.org/CVERecord?id=CVE-2017-7792", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Looben Yang", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7800", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479218", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7800", }, { category: "external", summary: "RHBZ#1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7800", url: "https://www.cve.org/CVERecord?id=CVE-2017-7800", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7801", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479223", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur while re-computing layout for a \"marquee\" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with marquee during window resizing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7801", }, { category: "external", summary: "RHBZ#1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7801", url: "https://www.cve.org/CVERecord?id=CVE-2017-7801", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free with marquee during window resizing", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7802", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479224", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7802", }, { category: "external", summary: "RHBZ#1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7802", url: "https://www.cve.org/CVERecord?id=CVE-2017-7802", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Rhys Enniks", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7803", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479225", }, ], notes: [ { category: "description", text: "When a page's content security policy (CSP) header contains a \"sandbox\" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7803", }, { category: "external", summary: "RHBZ#1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7803", url: "https://www.cve.org/CVERecord?id=CVE-2017-7803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mathias Karlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7807", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479227", }, ], notes: [ { category: "description", text: "A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7807", }, { category: "external", summary: "RHBZ#1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7807", url: "https://www.cve.org/CVERecord?id=CVE-2017-7807", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "The Mozilla Project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7809", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479650", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7809", }, { category: "external", summary: "RHBZ#1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7809", url: "https://www.cve.org/CVERecord?id=CVE-2017-7809", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", }, ], release_date: "2017-08-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", }, ], }
rhsa-2017:2534
Vulnerability from csaf_redhat
Published
2017-08-24 06:45
Modified
2025-01-05 18:55
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 52.3.0.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2017-7779, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)
Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 52.3.0.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2017-7779, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)\n\nRed Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2017:2534", url: "https://access.redhat.com/errata/RHSA-2017:2534", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-20/", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-20/", }, { category: "external", summary: "1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2534.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-05T18:55:04+00:00", generator: { date: "2025-01-05T18:55:04+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.5", }, }, id: "RHSA-2017:2534", initial_release_date: "2017-08-24T06:45:27+00:00", revision_history: [ { date: "2017-08-24T06:45:27+00:00", number: "1", summary: "Initial version", }, { date: "2017-08-24T06:45:27+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-05T18:55:04+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.x86_64", product: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64", product_id: "thunderbird-0:52.3.0-1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el7_4?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.x86_64", product: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64", product_id: "thunderbird-0:52.3.0-1.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.src", product: { name: "thunderbird-0:52.3.0-1.el6_9.src", product_id: "thunderbird-0:52.3.0-1.el6_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=src", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.src", product: { name: "thunderbird-0:52.3.0-1.el7_4.src", product_id: "thunderbird-0:52.3.0-1.el7_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.i686", product: { name: "thunderbird-0:52.3.0-1.el6_9.i686", product_id: "thunderbird-0:52.3.0-1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=i686", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.s390x", product: { name: "thunderbird-0:52.3.0-1.el6_9.s390x", product_id: "thunderbird-0:52.3.0-1.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.ppc64", product: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64", product_id: "thunderbird-0:52.3.0-1.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=ppc64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", product_id: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el7_4?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.ppc64le", product: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le", product_id: "thunderbird-0:52.3.0-1.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el7_4?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.aarch64", product: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64", product_id: "thunderbird-0:52.3.0-1.el7_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.src", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.src", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.src", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.src", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.src", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.src", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "SkyLined", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7753", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479188", }, ], notes: [ { category: "description", text: "An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7753", }, { category: "external", summary: "RHBZ#1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7753", url: "https://www.cve.org/CVERecord?id=CVE-2017-7753", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.1, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7779", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479191", }, ], notes: [ { category: "description", text: "Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7779", }, { category: "external", summary: "RHBZ#1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7779", url: "https://www.cve.org/CVERecord?id=CVE-2017-7779", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7784", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479201", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7784", }, { category: "external", summary: "RHBZ#1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7784", url: "https://www.cve.org/CVERecord?id=CVE-2017-7784", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7785", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479203", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7785", }, { category: "external", summary: "RHBZ#1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7785", url: "https://www.cve.org/CVERecord?id=CVE-2017-7785", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7786", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479205", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7786", }, { category: "external", summary: "RHBZ#1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7786", url: "https://www.cve.org/CVERecord?id=CVE-2017-7786", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Oliver Wagner", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7787", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479206", }, ], notes: [ { category: "description", text: "Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7787", }, { category: "external", summary: "RHBZ#1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7787", url: "https://www.cve.org/CVERecord?id=CVE-2017-7787", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Jose María Acuña", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7791", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479209", }, ], notes: [ { category: "description", text: "On pages containing an iframe, the \"data:\" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7791", }, { category: "external", summary: "RHBZ#1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7791", url: "https://www.cve.org/CVERecord?id=CVE-2017-7791", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Fraser Tweedale", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7792", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479210", }, ], notes: [ { category: "description", text: "A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7792", }, { category: "external", summary: "RHBZ#1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7792", url: "https://www.cve.org/CVERecord?id=CVE-2017-7792", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Looben Yang", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7800", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479218", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7800", }, { category: "external", summary: "RHBZ#1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7800", url: "https://www.cve.org/CVERecord?id=CVE-2017-7800", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7801", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479223", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur while re-computing layout for a \"marquee\" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with marquee during window resizing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7801", }, { category: "external", summary: "RHBZ#1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7801", url: "https://www.cve.org/CVERecord?id=CVE-2017-7801", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free with marquee during window resizing", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7802", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479224", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7802", }, { category: "external", summary: "RHBZ#1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7802", url: "https://www.cve.org/CVERecord?id=CVE-2017-7802", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Rhys Enniks", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7803", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479225", }, ], notes: [ { category: "description", text: "When a page's content security policy (CSP) header contains a \"sandbox\" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7803", }, { category: "external", summary: "RHBZ#1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7803", url: "https://www.cve.org/CVERecord?id=CVE-2017-7803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mathias Karlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7807", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479227", }, ], notes: [ { category: "description", text: "A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7807", }, { category: "external", summary: "RHBZ#1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7807", url: "https://www.cve.org/CVERecord?id=CVE-2017-7807", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "The Mozilla Project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7809", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479650", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7809", }, { category: "external", summary: "RHBZ#1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7809", url: "https://www.cve.org/CVERecord?id=CVE-2017-7809", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", }, ], release_date: "2017-08-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", }, ], }
RHSA-2017:2534
Vulnerability from csaf_redhat
Published
2017-08-24 06:45
Modified
2025-01-05 18:55
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
This update upgrades Thunderbird to version 52.3.0.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2017-7779, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)
Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Important", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 52.3.0.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2017-7779, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)\n\nRed Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2017:2534", url: "https://access.redhat.com/errata/RHSA-2017:2534", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#important", url: "https://access.redhat.com/security/updates/classification/#important", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-20/", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-20/", }, { category: "external", summary: "1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2534.json", }, ], title: "Red Hat Security Advisory: thunderbird security update", tracking: { current_release_date: "2025-01-05T18:55:04+00:00", generator: { date: "2025-01-05T18:55:04+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.5", }, }, id: "RHSA-2017:2534", initial_release_date: "2017-08-24T06:45:27+00:00", revision_history: [ { date: "2017-08-24T06:45:27+00:00", number: "1", summary: "Initial version", }, { date: "2017-08-24T06:45:27+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-05T18:55:04+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.x86_64", product: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64", product_id: "thunderbird-0:52.3.0-1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el7_4?arch=x86_64", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.x86_64", product: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64", product_id: "thunderbird-0:52.3.0-1.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.src", product: { name: "thunderbird-0:52.3.0-1.el6_9.src", product_id: "thunderbird-0:52.3.0-1.el6_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=src", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.src", product: { name: "thunderbird-0:52.3.0-1.el7_4.src", product_id: "thunderbird-0:52.3.0-1.el7_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.i686", product: { name: "thunderbird-0:52.3.0-1.el6_9.i686", product_id: "thunderbird-0:52.3.0-1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=i686", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.s390x", product: { name: "thunderbird-0:52.3.0-1.el6_9.s390x", product_id: "thunderbird-0:52.3.0-1.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=s390x", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "thunderbird-0:52.3.0-1.el6_9.ppc64", product: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64", product_id: "thunderbird-0:52.3.0-1.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el6_9?arch=ppc64", }, }, }, { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el6_9?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", product_id: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el7_4?arch=ppc64le", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.ppc64le", product: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le", product_id: "thunderbird-0:52.3.0-1.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", product: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", product_id: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird-debuginfo@52.3.0-1.el7_4?arch=aarch64", }, }, }, { category: "product_version", name: "thunderbird-0:52.3.0-1.el7_4.aarch64", product: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64", product_id: "thunderbird-0:52.3.0-1.el7_4.aarch64", product_identification_helper: { purl: "pkg:rpm/redhat/thunderbird@52.3.0-1.el7_4?arch=aarch64", }, }, }, ], category: "architecture", name: "aarch64", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.src", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.src", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.src", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.src", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.src", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.src", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", }, product_reference: "thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "SkyLined", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7753", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479188", }, ], notes: [ { category: "description", text: "An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7753", }, { category: "external", summary: "RHBZ#1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7753", url: "https://www.cve.org/CVERecord?id=CVE-2017-7753", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.1, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7779", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479191", }, ], notes: [ { category: "description", text: "Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7779", }, { category: "external", summary: "RHBZ#1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7779", url: "https://www.cve.org/CVERecord?id=CVE-2017-7779", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7784", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479201", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7784", }, { category: "external", summary: "RHBZ#1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7784", url: "https://www.cve.org/CVERecord?id=CVE-2017-7784", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7785", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479203", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7785", }, { category: "external", summary: "RHBZ#1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7785", url: "https://www.cve.org/CVERecord?id=CVE-2017-7785", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7786", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479205", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7786", }, { category: "external", summary: "RHBZ#1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7786", url: "https://www.cve.org/CVERecord?id=CVE-2017-7786", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Oliver Wagner", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7787", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479206", }, ], notes: [ { category: "description", text: "Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7787", }, { category: "external", summary: "RHBZ#1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7787", url: "https://www.cve.org/CVERecord?id=CVE-2017-7787", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Jose María Acuña", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7791", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479209", }, ], notes: [ { category: "description", text: "On pages containing an iframe, the \"data:\" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7791", }, { category: "external", summary: "RHBZ#1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7791", url: "https://www.cve.org/CVERecord?id=CVE-2017-7791", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Fraser Tweedale", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7792", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479210", }, ], notes: [ { category: "description", text: "A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7792", }, { category: "external", summary: "RHBZ#1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7792", url: "https://www.cve.org/CVERecord?id=CVE-2017-7792", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Looben Yang", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7800", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479218", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7800", }, { category: "external", summary: "RHBZ#1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7800", url: "https://www.cve.org/CVERecord?id=CVE-2017-7800", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7801", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479223", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur while re-computing layout for a \"marquee\" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with marquee during window resizing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7801", }, { category: "external", summary: "RHBZ#1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7801", url: "https://www.cve.org/CVERecord?id=CVE-2017-7801", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free with marquee during window resizing", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7802", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479224", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7802", }, { category: "external", summary: "RHBZ#1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7802", url: "https://www.cve.org/CVERecord?id=CVE-2017-7802", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Rhys Enniks", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7803", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479225", }, ], notes: [ { category: "description", text: "When a page's content security policy (CSP) header contains a \"sandbox\" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7803", }, { category: "external", summary: "RHBZ#1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7803", url: "https://www.cve.org/CVERecord?id=CVE-2017-7803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mathias Karlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7807", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479227", }, ], notes: [ { category: "description", text: "A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7807", }, { category: "external", summary: "RHBZ#1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7807", url: "https://www.cve.org/CVERecord?id=CVE-2017-7807", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "The Mozilla Project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7809", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479650", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7809", }, { category: "external", summary: "RHBZ#1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7809", url: "https://www.cve.org/CVERecord?id=CVE-2017-7809", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", }, ], release_date: "2017-08-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-24T06:45:27+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", product_ids: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2534", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Client-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Client-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Server-optional-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.src", "6Workstation-6.9.z:thunderbird-0:52.3.0-1.el6_9.x86_64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.i686", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.ppc64", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.s390x", "6Workstation-6.9.z:thunderbird-debuginfo-0:52.3.0-1.el6_9.x86_64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Client-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Client-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Server-optional-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Server-optional-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.src", "7Workstation-7.4.Z:thunderbird-0:52.3.0-1.el7_4.x86_64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.aarch64", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.ppc64le", "7Workstation-7.4.Z:thunderbird-debuginfo-0:52.3.0-1.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", }, ], }
rhsa-2017_2456
Vulnerability from csaf_redhat
Published
2017-08-10 23:20
Modified
2025-01-05 18:54
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Mozilla Firefox is an open source web browser.
This update upgrades Firefox to version 52.3.0 ESR.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2017-7779, CVE-2017-7798, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)
Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Frederik Braun, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open source web browser.\n\nThis update upgrades Firefox to version 52.3.0 ESR.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2017-7779, CVE-2017-7798, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)\n\nRed Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Frederik Braun, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2017:2456", url: "https://access.redhat.com/errata/RHSA-2017:2456", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#critical", url: "https://access.redhat.com/security/updates/classification/#critical", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/", }, { category: "external", summary: "1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "1479213", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479213", }, { category: "external", summary: "1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2456.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-05T18:54:59+00:00", generator: { date: "2025-01-05T18:54:59+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.5", }, }, id: "RHSA-2017:2456", initial_release_date: "2017-08-10T23:20:02+00:00", revision_history: [ { date: "2017-08-10T23:20:02+00:00", number: "1", summary: "Initial version", }, { date: "2017-08-10T23:20:02+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-05T18:54:59+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Client Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux HPC Node Optional (v. 6)", product: { name: "Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::computenode", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.x86_64", product: { name: "firefox-0:52.3.0-2.el7_4.x86_64", product_id: "firefox-0:52.3.0-2.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.x86_64", product: { name: "firefox-0:52.3.0-3.el6_9.x86_64", product_id: "firefox-0:52.3.0-3.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.src", product: { name: "firefox-0:52.3.0-2.el7_4.src", product_id: "firefox-0:52.3.0-2.el7_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=src", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.src", product: { name: "firefox-0:52.3.0-3.el6_9.src", product_id: "firefox-0:52.3.0-3.el6_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=i686", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.i686", product: { name: "firefox-0:52.3.0-2.el7_4.i686", product_id: "firefox-0:52.3.0-2.el7_4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=i686", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=i686", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.i686", product: { name: "firefox-0:52.3.0-3.el6_9.i686", product_id: "firefox-0:52.3.0-3.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.s390x", product: { name: "firefox-0:52.3.0-2.el7_4.s390x", product_id: "firefox-0:52.3.0-2.el7_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=s390x", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.s390x", product: { name: "firefox-0:52.3.0-3.el6_9.s390x", product_id: "firefox-0:52.3.0-3.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.ppc64", product: { name: "firefox-0:52.3.0-2.el7_4.ppc64", product_id: "firefox-0:52.3.0-2.el7_4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.ppc64", product: { name: "firefox-0:52.3.0-3.el6_9.ppc64", product_id: "firefox-0:52.3.0-3.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.ppc64le", product: { name: "firefox-0:52.3.0-2.el7_4.ppc64le", product_id: "firefox-0:52.3.0-2.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=ppc", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.ppc", product: { name: "firefox-0:52.3.0-2.el7_4.ppc", product_id: "firefox-0:52.3.0-2.el7_4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=ppc", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=ppc", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.ppc", product: { name: "firefox-0:52.3.0-3.el6_9.ppc", product_id: "firefox-0:52.3.0-3.el6_9.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=s390", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.s390", product: { name: "firefox-0:52.3.0-2.el7_4.s390", product_id: "firefox-0:52.3.0-2.el7_4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=s390", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=s390", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.s390", product: { name: "firefox-0:52.3.0-3.el6_9.s390", product_id: "firefox-0:52.3.0-3.el6_9.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "SkyLined", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7753", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479188", }, ], notes: [ { category: "description", text: "An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7753", }, { category: "external", summary: "RHBZ#1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7753", url: "https://www.cve.org/CVERecord?id=CVE-2017-7753", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.1, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7779", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479191", }, ], notes: [ { category: "description", text: "Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7779", }, { category: "external", summary: "RHBZ#1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7779", url: "https://www.cve.org/CVERecord?id=CVE-2017-7779", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7784", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479201", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7784", }, { category: "external", summary: "RHBZ#1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7784", url: "https://www.cve.org/CVERecord?id=CVE-2017-7784", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7785", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479203", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7785", }, { category: "external", summary: "RHBZ#1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7785", url: "https://www.cve.org/CVERecord?id=CVE-2017-7785", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7786", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479205", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7786", }, { category: "external", summary: "RHBZ#1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7786", url: "https://www.cve.org/CVERecord?id=CVE-2017-7786", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Oliver Wagner", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7787", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479206", }, ], notes: [ { category: "description", text: "Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7787", }, { category: "external", summary: "RHBZ#1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7787", url: "https://www.cve.org/CVERecord?id=CVE-2017-7787", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Jose María Acuña", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7791", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479209", }, ], notes: [ { category: "description", text: "On pages containing an iframe, the \"data:\" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7791", }, { category: "external", summary: "RHBZ#1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7791", url: "https://www.cve.org/CVERecord?id=CVE-2017-7791", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Fraser Tweedale", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7792", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479210", }, ], notes: [ { category: "description", text: "A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7792", }, { category: "external", summary: "RHBZ#1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7792", url: "https://www.cve.org/CVERecord?id=CVE-2017-7792", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Frederik Braun", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7798", cwe: { id: "CWE-77", name: "Improper Neutralization of Special Elements used in a Command ('Command Injection')", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479213", }, ], notes: [ { category: "description", text: "The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR < 52.3 and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: XUL injection in the style editor in devtools (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7798", }, { category: "external", summary: "RHBZ#1479213", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479213", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7798", url: "https://www.cve.org/CVERecord?id=CVE-2017-7798", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7798", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7798", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7798", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7798", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: XUL injection in the style editor in devtools (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Looben Yang", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7800", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479218", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7800", }, { category: "external", summary: "RHBZ#1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7800", url: "https://www.cve.org/CVERecord?id=CVE-2017-7800", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7801", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479223", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur while re-computing layout for a \"marquee\" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with marquee during window resizing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7801", }, { category: "external", summary: "RHBZ#1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7801", url: "https://www.cve.org/CVERecord?id=CVE-2017-7801", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: Use-after-free with marquee during window resizing", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7802", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479224", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7802", }, { category: "external", summary: "RHBZ#1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7802", url: "https://www.cve.org/CVERecord?id=CVE-2017-7802", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Rhys Enniks", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7803", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479225", }, ], notes: [ { category: "description", text: "When a page's content security policy (CSP) header contains a \"sandbox\" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7803", }, { category: "external", summary: "RHBZ#1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7803", url: "https://www.cve.org/CVERecord?id=CVE-2017-7803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mathias Karlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7807", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479227", }, ], notes: [ { category: "description", text: "A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7807", }, { category: "external", summary: "RHBZ#1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7807", url: "https://www.cve.org/CVERecord?id=CVE-2017-7807", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "The Mozilla Project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7809", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479650", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7809", }, { category: "external", summary: "RHBZ#1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7809", url: "https://www.cve.org/CVERecord?id=CVE-2017-7809", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", }, ], release_date: "2017-08-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", }, ], }
rhsa-2017:2456
Vulnerability from csaf_redhat
Published
2017-08-10 23:20
Modified
2025-01-05 18:54
Summary
Red Hat Security Advisory: firefox security update
Notes
Topic
An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Mozilla Firefox is an open source web browser.
This update upgrades Firefox to version 52.3.0 ESR.
Security Fix(es):
* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2017-7779, CVE-2017-7798, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)
Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Frederik Braun, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ document: { aggregate_severity: { namespace: "https://access.redhat.com/security/updates/classification/", text: "Critical", }, category: "csaf_security_advisory", csaf_version: "2.0", distribution: { text: "Copyright © Red Hat, Inc. All rights reserved.", tlp: { label: "WHITE", url: "https://www.first.org/tlp/", }, }, lang: "en", notes: [ { category: "summary", text: "An update for firefox is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", title: "Topic", }, { category: "general", text: "Mozilla Firefox is an open source web browser.\n\nThis update upgrades Firefox to version 52.3.0 ESR.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2017-7779, CVE-2017-7798, CVE-2017-7800, CVE-2017-7801, CVE-2017-7753, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786, CVE-2017-7787, CVE-2017-7792, CVE-2017-7802, CVE-2017-7807, CVE-2017-7809, CVE-2017-7791, CVE-2017-7803)\n\nRed Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla developers and community, Frederik Braun, Looben Yang, Nils, SkyLined, Oliver Wagner, Fraser Tweedale, Mathias Karlsson, Jose María Acuña, and Rhys Enniks as the original reporters.", title: "Details", }, { category: "legal_disclaimer", text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", title: "Terms of Use", }, ], publisher: { category: "vendor", contact_details: "https://access.redhat.com/security/team/contact/", issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", name: "Red Hat Product Security", namespace: "https://www.redhat.com", }, references: [ { category: "self", summary: "https://access.redhat.com/errata/RHSA-2017:2456", url: "https://access.redhat.com/errata/RHSA-2017:2456", }, { category: "external", summary: "https://access.redhat.com/security/updates/classification/#critical", url: "https://access.redhat.com/security/updates/classification/#critical", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/", }, { category: "external", summary: "1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "1479213", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479213", }, { category: "external", summary: "1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "self", summary: "Canonical URL", url: "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2456.json", }, ], title: "Red Hat Security Advisory: firefox security update", tracking: { current_release_date: "2025-01-05T18:54:59+00:00", generator: { date: "2025-01-05T18:54:59+00:00", engine: { name: "Red Hat SDEngine", version: "4.2.5", }, }, id: "RHSA-2017:2456", initial_release_date: "2017-08-10T23:20:02+00:00", revision_history: [ { date: "2017-08-10T23:20:02+00:00", number: "1", summary: "Initial version", }, { date: "2017-08-10T23:20:02+00:00", number: "2", summary: "Last updated version", }, { date: "2025-01-05T18:54:59+00:00", number: "3", summary: "Last generated version", }, ], status: "final", version: "3", }, }, product_tree: { branches: [ { branches: [ { branches: [ { category: "product_name", name: "Red Hat Enterprise Linux Client (v. 7)", product: { name: "Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Client Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 7)", product: { name: "Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:7::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Desktop Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::client", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux HPC Node Optional (v. 6)", product: { name: "Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::computenode", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server (v. 6)", product: { name: "Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Server Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::server", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, { category: "product_name", name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product: { name: "Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z", product_identification_helper: { cpe: "cpe:/o:redhat:enterprise_linux:6::workstation", }, }, }, ], category: "product_family", name: "Red Hat Enterprise Linux", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.x86_64", product: { name: "firefox-0:52.3.0-2.el7_4.x86_64", product_id: "firefox-0:52.3.0-2.el7_4.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=x86_64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.x86_64", product: { name: "firefox-0:52.3.0-3.el6_9.x86_64", product_id: "firefox-0:52.3.0-3.el6_9.x86_64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=x86_64", }, }, }, ], category: "architecture", name: "x86_64", }, { branches: [ { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.src", product: { name: "firefox-0:52.3.0-2.el7_4.src", product_id: "firefox-0:52.3.0-2.el7_4.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=src", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.src", product: { name: "firefox-0:52.3.0-3.el6_9.src", product_id: "firefox-0:52.3.0-3.el6_9.src", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=src", }, }, }, ], category: "architecture", name: "src", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=i686", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.i686", product: { name: "firefox-0:52.3.0-2.el7_4.i686", product_id: "firefox-0:52.3.0-2.el7_4.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=i686", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=i686", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.i686", product: { name: "firefox-0:52.3.0-3.el6_9.i686", product_id: "firefox-0:52.3.0-3.el6_9.i686", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=i686", }, }, }, ], category: "architecture", name: "i686", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.s390x", product: { name: "firefox-0:52.3.0-2.el7_4.s390x", product_id: "firefox-0:52.3.0-2.el7_4.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=s390x", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=s390x", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.s390x", product: { name: "firefox-0:52.3.0-3.el6_9.s390x", product_id: "firefox-0:52.3.0-3.el6_9.s390x", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=s390x", }, }, }, ], category: "architecture", name: "s390x", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.ppc64", product: { name: "firefox-0:52.3.0-2.el7_4.ppc64", product_id: "firefox-0:52.3.0-2.el7_4.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=ppc64", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.ppc64", product: { name: "firefox-0:52.3.0-3.el6_9.ppc64", product_id: "firefox-0:52.3.0-3.el6_9.ppc64", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=ppc64", }, }, }, ], category: "architecture", name: "ppc64", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=ppc64le", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.ppc64le", product: { name: "firefox-0:52.3.0-2.el7_4.ppc64le", product_id: "firefox-0:52.3.0-2.el7_4.ppc64le", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=ppc64le", }, }, }, ], category: "architecture", name: "ppc64le", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=ppc", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.ppc", product: { name: "firefox-0:52.3.0-2.el7_4.ppc", product_id: "firefox-0:52.3.0-2.el7_4.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=ppc", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=ppc", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.ppc", product: { name: "firefox-0:52.3.0-3.el6_9.ppc", product_id: "firefox-0:52.3.0-3.el6_9.ppc", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=ppc", }, }, }, ], category: "architecture", name: "ppc", }, { branches: [ { category: "product_version", name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", product: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", product_id: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-2.el7_4?arch=s390", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-2.el7_4.s390", product: { name: "firefox-0:52.3.0-2.el7_4.s390", product_id: "firefox-0:52.3.0-2.el7_4.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-2.el7_4?arch=s390", }, }, }, { category: "product_version", name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", product: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", product_id: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox-debuginfo@52.3.0-3.el6_9?arch=s390", }, }, }, { category: "product_version", name: "firefox-0:52.3.0-3.el6_9.s390", product: { name: "firefox-0:52.3.0-3.el6_9.s390", product_id: "firefox-0:52.3.0-3.el6_9.s390", product_identification_helper: { purl: "pkg:rpm/redhat/firefox@52.3.0-3.el6_9?arch=s390", }, }, }, ], category: "architecture", name: "s390", }, ], category: "vendor", name: "Red Hat", }, ], relationships: [ { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)", product_id: "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)", product_id: "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Client-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)", product_id: "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6ComputeNode-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)", product_id: "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)", product_id: "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Server-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)", product_id: "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", }, product_reference: "firefox-0:52.3.0-3.el6_9.src", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.i686", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.s390x", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)", product_id: "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", relates_to_product_reference: "6Workstation-optional-6.9.z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", product_id: "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", product_id: "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Client-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", product_id: "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", product_id: "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Server-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", product_id: "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", }, product_reference: "firefox-0:52.3.0-2.el7_4.src", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.i686", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.s390x", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, { category: "default_component_of", full_product_name: { name: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", product_id: "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", }, product_reference: "firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", relates_to_product_reference: "7Workstation-optional-7.4.Z", }, ], }, vulnerabilities: [ { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "SkyLined", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7753", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479188", }, ], notes: [ { category: "description", text: "An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7753", }, { category: "external", summary: "RHBZ#1479188", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479188", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7753", url: "https://www.cve.org/CVERecord?id=CVE-2017-7753", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7753", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7753", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.1, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "NONE", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Out-of-bounds read with cached style data and pseudo-elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mozilla developers and community", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7779", cwe: { id: "CWE-119", name: "Improper Restriction of Operations within the Bounds of a Memory Buffer", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479191", }, ], notes: [ { category: "description", text: "Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7779", }, { category: "external", summary: "RHBZ#1479191", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479191", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7779", url: "https://www.cve.org/CVERecord?id=CVE-2017-7779", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7779", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7779", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3 (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7784", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479201", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer has been freed. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7784", }, { category: "external", summary: "RHBZ#1479201", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479201", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7784", url: "https://www.cve.org/CVERecord?id=CVE-2017-7784", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7784", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7784", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free with image observers (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7785", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479203", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7785", }, { category: "external", summary: "RHBZ#1479203", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479203", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7785", url: "https://www.cve.org/CVERecord?id=CVE-2017-7785", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7785", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7785", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow manipulating ARIA elements in DOM (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7786", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479205", }, ], notes: [ { category: "description", text: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7786", }, { category: "external", summary: "RHBZ#1479205", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479205", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7786", url: "https://www.cve.org/CVERecord?id=CVE-2017-7786", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7786", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow while painting non-displayable SVG (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Oliver Wagner", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7787", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479206", }, ], notes: [ { category: "description", text: "Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes to access content on the top level page, leading to information disclosure. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7787", }, { category: "external", summary: "RHBZ#1479206", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479206", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7787", url: "https://www.cve.org/CVERecord?id=CVE-2017-7787", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7787", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7787", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Same-origin policy bypass with iframes through page reloads (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Jose María Acuña", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7791", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479209", }, ], notes: [ { category: "description", text: "On pages containing an iframe, the \"data:\" protocol can be used to create a modal alert that will render over arbitrary domains following page navigation, spoofing of the origin of the modal alert from the iframe content. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7791", }, { category: "external", summary: "RHBZ#1479209", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479209", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7791", url: "https://www.cve.org/CVERecord?id=CVE-2017-7791", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7791", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7791", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 5.3, baseSeverity: "MEDIUM", confidentialityImpact: "NONE", integrityImpact: "LOW", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: Spoofing following page navigation with data: protocol and modal alerts (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Fraser Tweedale", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7792", cwe: { id: "CWE-125", name: "Out-of-bounds Read", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479210", }, ], notes: [ { category: "description", text: "A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely long object identifier (OID). This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7792", }, { category: "external", summary: "RHBZ#1479210", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479210", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7792", url: "https://www.cve.org/CVERecord?id=CVE-2017-7792", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7792", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7792", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Buffer overflow viewing certificates with long OID (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Frederik Braun", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7798", cwe: { id: "CWE-77", name: "Improper Neutralization of Special Elements used in a Command ('Command Injection')", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479213", }, ], notes: [ { category: "description", text: "The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR < 52.3 and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: XUL injection in the style editor in devtools (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7798", }, { category: "external", summary: "RHBZ#1479213", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479213", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7798", url: "https://www.cve.org/CVERecord?id=CVE-2017-7798", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7798", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7798", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7798", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7798", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 8.8, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: XUL injection in the style editor in devtools (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Looben Yang", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7800", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479218", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disconnection operation is finished. This results in an exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7800", }, { category: "external", summary: "RHBZ#1479218", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479218", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7800", url: "https://www.cve.org/CVERecord?id=CVE-2017-7800", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7800", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7800", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: Use-after-free in WebSockets during disconnection (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7801", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479223", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur while re-computing layout for a \"marquee\" element during window resizing where the updated style object is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free with marquee during window resizing", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7801", }, { category: "external", summary: "RHBZ#1479223", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479223", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7801", url: "https://www.cve.org/CVERecord?id=CVE-2017-7801", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7801", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7801", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Critical", }, ], title: "Mozilla: Use-after-free with marquee during window resizing", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7802", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479224", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If these elements have been freed due to a lack of strong references, a potentially exploitable crash may occur when the freed elements are accessed. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7802", }, { category: "external", summary: "RHBZ#1479224", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479224", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7802", url: "https://www.cve.org/CVERecord?id=CVE-2017-7802", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7802", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7802", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free resizing image elements (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Rhys Enniks", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7803", cwe: { id: "CWE-863", name: "Incorrect Authorization", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479225", }, ], notes: [ { category: "description", text: "When a page's content security policy (CSP) header contains a \"sandbox\" directive, other directives are ignored. This results in the incorrect enforcement of CSP. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7803", }, { category: "external", summary: "RHBZ#1479225", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479225", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7803", url: "https://www.cve.org/CVERecord?id=CVE-2017-7803", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7803", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7803", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "NONE", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "NONE", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Moderate", }, ], title: "Mozilla: CSP directives improperly applied with sandbox flag in iframes (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "the Mozilla project", ], }, { names: [ "Mathias Karlsson", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7807", cwe: { id: "CWE-829", name: "Inclusion of Functionality from Untrusted Control Sphere", }, discovery_date: "2017-08-08T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479227", }, ], notes: [ { category: "description", text: "A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the domain. This has been addressed by requiring fallback files be inside the manifest directory. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7807", }, { category: "external", summary: "RHBZ#1479227", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479227", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7807", url: "https://www.cve.org/CVERecord?id=CVE-2017-7807", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7807", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7807", }, ], release_date: "2017-08-08T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "HIGH", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 7.5, baseSeverity: "HIGH", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "REQUIRED", vectorString: "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Domain hijacking through appcache fallback (MFSA 2017-19)", }, { acknowledgments: [ { names: [ "The Mozilla Project", ], }, { names: [ "Nils", ], summary: "Acknowledged by upstream.", }, ], cve: "CVE-2017-7809", cwe: { id: "CWE-416", name: "Use After Free", }, discovery_date: "2017-08-09T00:00:00+00:00", ids: [ { system_name: "Red Hat Bugzilla ID", text: "1479650", }, ], notes: [ { category: "description", text: "A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", title: "Vulnerability description", }, { category: "summary", text: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", title: "Vulnerability summary", }, { category: "general", text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", title: "CVSS score applicability", }, ], product_status: { fixed: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, references: [ { category: "self", summary: "Canonical URL", url: "https://access.redhat.com/security/cve/CVE-2017-7809", }, { category: "external", summary: "RHBZ#1479650", url: "https://bugzilla.redhat.com/show_bug.cgi?id=1479650", }, { category: "external", summary: "https://www.cve.org/CVERecord?id=CVE-2017-7809", url: "https://www.cve.org/CVERecord?id=CVE-2017-7809", }, { category: "external", summary: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7809", }, { category: "external", summary: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", url: "https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/#CVE-2017-7809", }, ], release_date: "2017-08-09T00:00:00+00:00", remediations: [ { category: "vendor_fix", date: "2017-08-10T23:20:02+00:00", details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.", product_ids: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], restart_required: { category: "none", }, url: "https://access.redhat.com/errata/RHSA-2017:2456", }, ], scores: [ { cvss_v3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, products: [ "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Client-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Client-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6ComputeNode-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6ComputeNode-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Server-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Server-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.src", "6Workstation-optional-6.9.z:firefox-0:52.3.0-3.el6_9.x86_64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.i686", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.ppc64", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.s390x", "6Workstation-optional-6.9.z:firefox-debuginfo-0:52.3.0-3.el6_9.x86_64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Client-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Client-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Server-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Server-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.src", "7Workstation-optional-7.4.Z:firefox-0:52.3.0-2.el7_4.x86_64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.i686", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.ppc64le", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.s390x", "7Workstation-optional-7.4.Z:firefox-debuginfo-0:52.3.0-2.el7_4.x86_64", ], }, ], threats: [ { category: "impact", details: "Important", }, ], title: "Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)", }, ], }
ghsa-xc6f-7p9r-r945
Vulnerability from github
Published
2022-05-14 03:10
Modified
2024-10-21 15:32
Severity ?
Details
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
{ affected: [], aliases: [ "CVE-2017-7786", ], database_specific: { cwe_ids: [ "CWE-119", ], github_reviewed: false, github_reviewed_at: null, nvd_published_at: "2018-06-11T21:29:00Z", severity: "CRITICAL", }, details: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", id: "GHSA-xc6f-7p9r-r945", modified: "2024-10-21T15:32:20Z", published: "2022-05-14T03:10:51Z", references: [ { type: "ADVISORY", url: "https://nvd.nist.gov/vuln/detail/CVE-2017-7786", }, { type: "WEB", url: "https://access.redhat.com/errata/RHSA-2017:2456", }, { type: "WEB", url: "https://access.redhat.com/errata/RHSA-2017:2534", }, { type: "WEB", url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189", }, { type: "WEB", url: "https://security.gentoo.org/glsa/201803-14", }, { type: "WEB", url: "https://www.debian.org/security/2017/dsa-3928", }, { type: "WEB", url: "https://www.debian.org/security/2017/dsa-3968", }, { type: "WEB", url: "https://www.mozilla.org/security/advisories/mfsa2017-18", }, { type: "WEB", url: "https://www.mozilla.org/security/advisories/mfsa2017-19", }, { type: "WEB", url: "https://www.mozilla.org/security/advisories/mfsa2017-20", }, { type: "WEB", url: "http://www.securityfocus.com/bid/100206", }, { type: "WEB", url: "http://www.securitytracker.com/id/1039124", }, ], schema_version: "1.4.0", severity: [ { score: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", type: "CVSS_V3", }, ], }
gsd-2017-7786
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.
Aliases
Aliases
{ GSD: { alias: "CVE-2017-7786", description: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", id: "GSD-2017-7786", references: [ "https://www.suse.com/security/cve/CVE-2017-7786.html", "https://www.debian.org/security/2017/dsa-3968", "https://www.debian.org/security/2017/dsa-3928", "https://access.redhat.com/errata/RHSA-2017:2534", "https://access.redhat.com/errata/RHSA-2017:2456", "https://ubuntu.com/security/CVE-2017-7786", "https://advisories.mageia.org/CVE-2017-7786.html", "https://security.archlinux.org/CVE-2017-7786", "https://linux.oracle.com/cve/CVE-2017-7786.html", ], }, gsd: { metadata: { exploitCode: "unknown", remediation: "unknown", reportConfidence: "confirmed", type: "vulnerability", }, osvSchema: { aliases: [ "CVE-2017-7786", ], details: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", id: "GSD-2017-7786", modified: "2023-12-13T01:21:06.204859Z", schema_version: "1.4.0", }, }, namespaces: { "cve.org": { CVE_data_meta: { ASSIGNER: "security@mozilla.org", ID: "CVE-2017-7786", STATE: "PUBLIC", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Thunderbird", version: { version_data: [ { version_affected: "<", version_value: "52.3", }, ], }, }, { product_name: "Firefox ESR", version: { version_data: [ { version_affected: "<", version_value: "52.3", }, ], }, }, { product_name: "Firefox", version: { version_data: [ { version_affected: "<", version_value: "55", }, ], }, }, ], }, vendor_name: "Mozilla", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "Buffer overflow while painting non-displayable SVG", }, ], }, ], }, references: { reference_data: [ { name: "https://www.mozilla.org/security/advisories/mfsa2017-19/", refsource: "CONFIRM", url: "https://www.mozilla.org/security/advisories/mfsa2017-19/", }, { name: "https://www.mozilla.org/security/advisories/mfsa2017-20/", refsource: "CONFIRM", url: "https://www.mozilla.org/security/advisories/mfsa2017-20/", }, { name: "DSA-3968", refsource: "DEBIAN", url: "https://www.debian.org/security/2017/dsa-3968", }, { name: "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189", refsource: "CONFIRM", url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189", }, { name: "https://www.mozilla.org/security/advisories/mfsa2017-18/", refsource: "CONFIRM", url: "https://www.mozilla.org/security/advisories/mfsa2017-18/", }, { name: "RHSA-2017:2456", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2017:2456", }, { name: "RHSA-2017:2534", refsource: "REDHAT", url: "https://access.redhat.com/errata/RHSA-2017:2534", }, { name: "100206", refsource: "BID", url: "http://www.securityfocus.com/bid/100206", }, { name: "1039124", refsource: "SECTRACK", url: "http://www.securitytracker.com/id/1039124", }, { name: "GLSA-201803-14", refsource: "GENTOO", url: "https://security.gentoo.org/glsa/201803-14", }, { name: "DSA-3928", refsource: "DEBIAN", url: "https://www.debian.org/security/2017/dsa-3928", }, ], }, }, "mozilla.org": { CVE_data_meta: { ASSIGNER: "security@mozilla.org", ID: "CVE-2017-7786", }, affects: { vendor: { vendor_data: [ { product: { product_data: [ { product_name: "Firefox ESR", version: { version_data: [ { version_affected: "<", version_value: "52.3", }, ], }, }, { product_name: "Thunderbird", version: { version_data: [ { version_affected: "<", version_value: "52.3", }, ], }, }, { product_name: "Firefox", version: { version_data: [ { version_affected: "<", version_value: "55", }, ], }, }, ], }, vendor_name: "Mozilla", }, ], }, }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "eng", value: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.3, Thunderbird < 52.3, and Firefox < 55.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "eng", value: "Buffer overflow while painting non-displayable SVG", }, ], }, ], }, references: { reference_data: [ { url: "https://www.mozilla.org/security/advisories/mfsa2017-20/", }, { url: "https://www.mozilla.org/security/advisories/mfsa2017-18/", }, { url: "https://www.mozilla.org/security/advisories/mfsa2017-19/", }, { url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189", }, ], }, }, "nvd.nist.gov": { configurations: { CVE_data_version: "4.0", nodes: [ { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, { cpe23Uri: "cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*", cpe_name: [], vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "52.1.0", versionStartIncluding: "52.0", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "52.3", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "55.0", vulnerable: true, }, ], operator: "OR", }, { children: [], cpe_match: [ { cpe23Uri: "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", cpe_name: [], versionEndExcluding: "52.3", vulnerable: true, }, ], operator: "OR", }, ], }, cve: { CVE_data_meta: { ASSIGNER: "security@mozilla.org", ID: "CVE-2017-7786", }, data_format: "MITRE", data_type: "CVE", data_version: "4.0", description: { description_data: [ { lang: "en", value: "A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.3, Firefox ESR < 52.3, and Firefox < 55.", }, ], }, problemtype: { problemtype_data: [ { description: [ { lang: "en", value: "CWE-119", }, ], }, ], }, references: { reference_data: [ { name: "https://www.mozilla.org/security/advisories/mfsa2017-20/", refsource: "CONFIRM", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2017-20/", }, { name: "https://www.mozilla.org/security/advisories/mfsa2017-19/", refsource: "CONFIRM", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2017-19/", }, { name: "https://www.mozilla.org/security/advisories/mfsa2017-18/", refsource: "CONFIRM", tags: [ "Vendor Advisory", ], url: "https://www.mozilla.org/security/advisories/mfsa2017-18/", }, { name: "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189", refsource: "CONFIRM", tags: [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory", ], url: "https://bugzilla.mozilla.org/show_bug.cgi?id=1365189", }, { name: "DSA-3968", refsource: "DEBIAN", tags: [ "Third Party Advisory", ], url: "https://www.debian.org/security/2017/dsa-3968", }, { name: "DSA-3928", refsource: "DEBIAN", tags: [ "Third Party Advisory", ], url: "https://www.debian.org/security/2017/dsa-3928", }, { name: "GLSA-201803-14", refsource: "GENTOO", tags: [ "Third Party Advisory", ], url: "https://security.gentoo.org/glsa/201803-14", }, { name: "RHSA-2017:2534", refsource: "REDHAT", tags: [ "Third Party Advisory", ], url: "https://access.redhat.com/errata/RHSA-2017:2534", }, { name: "RHSA-2017:2456", refsource: "REDHAT", tags: [ "Third Party Advisory", ], url: "https://access.redhat.com/errata/RHSA-2017:2456", }, { name: "1039124", refsource: "SECTRACK", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securitytracker.com/id/1039124", }, { name: "100206", refsource: "BID", tags: [ "Third Party Advisory", "VDB Entry", ], url: "http://www.securityfocus.com/bid/100206", }, ], }, }, impact: { baseMetricV2: { acInsufInfo: true, cvssV2: { accessComplexity: "LOW", accessVector: "NETWORK", authentication: "NONE", availabilityImpact: "PARTIAL", baseScore: 7.5, confidentialityImpact: "PARTIAL", integrityImpact: "PARTIAL", vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P", version: "2.0", }, exploitabilityScore: 10, impactScore: 6.4, obtainAllPrivilege: false, obtainOtherPrivilege: false, obtainUserPrivilege: false, severity: "HIGH", userInteractionRequired: false, }, baseMetricV3: { cvssV3: { attackComplexity: "LOW", attackVector: "NETWORK", availabilityImpact: "HIGH", baseScore: 9.8, baseSeverity: "CRITICAL", confidentialityImpact: "HIGH", integrityImpact: "HIGH", privilegesRequired: "NONE", scope: "UNCHANGED", userInteraction: "NONE", vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", version: "3.0", }, exploitabilityScore: 3.9, impactScore: 5.9, }, }, lastModifiedDate: "2018-08-03T15:09Z", publishedDate: "2018-06-11T21:29Z", }, }, }
Log in or create an account to share your comment.
Security Advisory comment format.
This schema specifies the format of a comment related to a security advisory.
UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).
Loading…
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.