CVE-2017-7801

A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style object is freed while…

published June 11, 2018

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

⚠️ A layout mishap during window resizing could lead to a dangerous crash! This use-after-free vulnerability in Thunderbird and Firefox is surprisingly sneaky. 💥 Think of it like trying to read a book while someone pulls pages out from under you — you might end up lost and confused as the story falls apart! If exploited, this tricky bug could lead to crashes in the applications, leaving your users stranded mid-task. While it doesn't seem to lead to full exploitation, the potential for instability makes it a concern for user experience!

Put simply

Think of it like trying to read a book while someone pulls pages out from under you — you might end up lost and confused as the story falls apart! This use-after-free vulnerability occurs when the layout for a "marquee" element is recomputed during window resizing. The updated style object gets freed while still in use, leading to potential crashes.

What to do

If exploited, this tricky bug could lead to crashes in the applications, leaving your users stranded mid-task. While it doesn't seem to lead to full exploitation, the potential for instability makes it a concern for user experience! Ensure you're running Thunderbird version 52.3 or later, as well as Firefox ESR and Firefox versions 52.3 and 55 respectively. Keeping your software updated is crucial in defending against such sneaky vulnerabilities! You've got this! Keep your applications safe and sound by staying updated! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02589 · 85.1th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where the updated style object is freed while…
    cvelistv5