CVE-2017-5444

A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data

published June 11, 2018

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06782 · 93.9th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data
    cvelistv5