CVE-2017-5428

An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest

published June 11, 2018

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky integer overflow lurking in Firefox could lead to unintentional consequences! Think of it like a waiter accidentally pouring too much soda into a glass. If it overflows, the entire table gets messy and may require some cleanup! Although it needs a second vulnerability for full exploitation, an attacker could potentially gain unauthorized access to user data. This could lead to a frustrating experience or worse, compromising sensitive information. Yikes!

Put simply

Think of it like a waiter accidentally pouring too much soda into a glass. If it overflows, the entire table gets messy and may require some cleanup! This vulnerability arises from an integer overflow in the 'createImageBitmap()' function, which behaves like an unchecked order at a restaurant that spills over, leading to possible instability in the content sandbox.

What to do

Although it needs a second vulnerability for full exploitation, an attacker could potentially gain unauthorized access to user data. This could lead to a frustrating experience or worse, compromising sensitive information. Yikes! To protect yourself, ensure that you're using Firefox ESR version 52.0.1 or later, or Firefox version 52.0.1 or later. Regularly update your browser to stay ahead of potential exploits! You've got this! Stay vigilant and keep those browsers updated! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03179 · 87.9th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest
    cvelistv5