CVE-2017-5390

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The JSON viewer in the Developer Tools uses insecure methods to create a communication channel for copying and viewing JSON or HTTP headers data, allowing for potential privilege escalation. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Jun 11, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-53919.8Special "about:" pages used by web content, such as RSS feeds, can load privileged "about:" pages in an iframe. If a content-injection bug wCVE-2017-53929.8Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and CVE-2017-53936.1The "mozAddonManager" allows for the installation of extensions from the CDN for addons.mozilla.org, a publicly accessible site. This could CVE-2017-53948.8A location bar spoofing attack where the location bar of loaded page will be shown over the content of another tab due to a series of JavaScCVE-2017-53954.3Malicious sites can display a spoofed location bar on a subsequently loaded page when the existing location bar on the new page is scrolled CVE-2017-53969.8A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are frCVE-2017-53979.8The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allCVE-2017-53989.8Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enougCVE-2017-53999.8Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effoCVE-2017-54009.8JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruptionCVE-2017-54019.8A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be eCVE-2017-54029.8A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with