Files
CVEs-PoC/2017/CVE-2017-7757.md
T
2024-06-18 02:51:15 +02:00

21 lines
1.0 KiB
Markdown

### [CVE-2017-7757](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7757)
![](https://img.shields.io/static/v1?label=Product&message=Firefox%20ESR&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Firefox&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=Thunderbird&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2052.2%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2054%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Use-after-free%20in%20IndexedDB&color=brighgreen)
### Description
A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
### POC
#### Reference
- https://bugzilla.mozilla.org/show_bug.cgi?id=1356824
#### Github
No PoCs found on GitHub currently.