CVE-2017-5378

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered through hash codes, and also allows for data leakage of an object's content using these hash codes. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
MozillaThunderbird>= unspecified, < 45.7
MozillaFirefox ESR>= unspecified, < 45.7
MozillaFirefox>= unspecified, < 51

References

Timeline

Published
Jun 11, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-53797.5Use-after-free vulnerability in Web Animations when interacting with cycle collection found through fuzzing. This vulnerability affects FireCVE-2017-53809.8A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird < 45.7, FireCVE-2017-53817.5The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slashCVE-2017-53827.5Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internCVE-2017-53835.3URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain nameCVE-2017-53845.9Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which exposes more informCVE-2017-53857.5Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, leadCVE-2017-53867.3WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential dCVE-2017-53873.3The existence of a specifically requested local file can be found due to the double firing of the "onerror" when the "source" attribute on aCVE-2017-53887.5A STUN server in conjunction with a large number of "webkitRTCPeerConnection" objects can be used to send large STUN packets in a short periCVE-2017-53896.1WebExtensions could use the "mozAddonManager" API by modifying the CSP headers on sites with the appropriate permissions and then using hostCVE-2017-53909.8The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers
CVE-2017-5378: High severity, CVSS 7.5 | Vulnix