CVE-2017-5416
Published: 07 March 2017
In certain circumstances a networking event listener can be prematurely released. This appears to result in a null dereference in practice. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Priority
CVSS 3 base score: 7.5
Status
Package | Release | Status |
---|---|---|
firefox Launchpad, Ubuntu, Debian |
Upstream |
Released
(52.0)
|
Ubuntu 16.04 LTS (Xenial Xerus) |
Released
(52.0+build2-0ubuntu0.16.04.1)
|
|
Ubuntu 14.04 ESM (Trusty Tahr) |
Does not exist
(trusty was released [52.0+build2-0ubuntu0.14.04.1])
|
|
Ubuntu 12.04 ESM (Precise Pangolin) |
Released
(52.0+build2-0ubuntu0.12.04.1)
|