漏洞类别:Local
漏洞等级:
漏洞信息
Firefox is a free and open-source web browser developed for Windows, OS X, and Linux, with a mobile version for Android.
A use-after-free can occur during Buffer11 API calls within the ANGLE graphics library, used for WebGL content. This can lead to a potentially exploitable crash.
Affected Version :
Firefox prior to 53.0.2
Firefox ESR prior to 52.1.1
漏洞危害
An attacker may exploit this issue to crash the affected application, resulting in a denial-of-service condition.
解决方案
The vendor has issued a fix (53.0.2). Refer to MFSA 2017-14
Patch:
Following are links for downloading patches to fix the vulnerabilities:
0day
文章评论