CVE-2017-5448

An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content

published June 11, 2018

CVSS
—
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media Plugin (GMP) sandbox. If a second mechanism is found to escape the sandbox, this vulnerability allows for the writing of arbitrary data within memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02025 · 80.7th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content
    cvelistv5