The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
On Windows systems, if non-null-terminated strings are copied into the crash reporter for some specific registry keys, stack memory data can be copied until a null is found. This can potentially contain private data from the local system. Note: This attack only affects Windows operating systems. Other operating systems are not affected. This vulnerability affects Firefox < 55.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade linux-thunderbirdUpgrade libxulUpgrade firefoxUpgrade firefox-esrUpgrade thunderbirdUpgrade linux-firefoxUpgrade seamonkeyUpgrade linux-seamonkey | Aug 8, 2017 | Aug 8, 2017 |
| Mfsa2017 18 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 55.0 | Aug 9, 2017 | Aug 8, 2017 |
| Suse | — | Upgrade MozillaFirefoxUpgrade MozillaFirefox-translations-otherUpgrade MozillaFirefox-translations-common | May 20, 2018 | Aug 8, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub