Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-5428
HistoryJun 11, 2018 - 9:29 p.m.

Integer overflow

2018-06-1121:29:00
PRIOn knowledge base
www.prio-n.com
11

8.8 High

AI Score

Confidence

High

0.604 Medium

EPSS

Percentile

97.8%

An integer overflow in “createImageBitmap()” was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the “createImageBitmap” API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user’s computer. This vulnerability affects Firefox ESR < 52.0.1 and Firefox < 52.0.1.