Format string

2018-06-1121:29:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.9%

JSON

A vulnerability while parsing “application/http-index-format” format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

CPENameOperatorVersion
debian_linuxeq9.0
firefoxlt53.0
firefox_esrlt45.9.0
firefox_esreq52.0
thunderbirdlt52.1.0
enterprise_linuxeq7.0
enterprise_linuxeq6.0
enterprise_linux_desktopeq7.0
enterprise_linux_desktopeq6.0
enterprise_linux_servereq7.0

Name	Operator	Version
debian_linux	eq	9.0
firefox	lt	53.0
firefox_esr	lt	45.9.0
firefox_esr	eq	52.0
thunderbird	lt	52.1.0
enterprise_linux	eq	7.0
enterprise_linux	eq	6.0
enterprise_linux_desktop	eq	7.0
enterprise_linux_desktop	eq	6.0
enterprise_linux_server	eq	7.0