Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-2pwv-h1am-hqbb
SummaryA use-after-free vulnerability can occur when flushing and resizing layout because the PressShell object has been freed while still in use. This results in a potentially exploitable crash during these operations.
Aliases
0
alias CVE-2017-7828
Fixed_packages
0
url pkg:alpm/archlinux/firefox@57.0-1
purl pkg:alpm/archlinux/firefox@57.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@57.0-1
1
url pkg:alpm/archlinux/thunderbird@52.5.0-1
purl pkg:alpm/archlinux/thunderbird@52.5.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@52.5.0-1
2
url pkg:mozilla/Firefox@57.0.0
purl pkg:mozilla/Firefox@57.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@57.0.0
3
url pkg:mozilla/Firefox%20ESR@52.5.0
purl pkg:mozilla/Firefox%20ESR@52.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520ESR@52.5.0
4
url pkg:mozilla/Thunderbird@52.5.0
purl pkg:mozilla/Thunderbird@52.5.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Thunderbird@52.5.0
Affected_packages
0
url pkg:alpm/archlinux/firefox@56.0.2-1
purl pkg:alpm/archlinux/firefox@56.0.2-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2pwv-h1am-hqbb
1
vulnerability VCID-3me6-q3c4-9uew
2
vulnerability VCID-4gwb-c8x5-tqbm
3
vulnerability VCID-53ts-p1ub-jufh
4
vulnerability VCID-5b1g-3rp1-k3fc
5
vulnerability VCID-61um-r6m7-cygn
6
vulnerability VCID-6u66-r4t3-2qar
7
vulnerability VCID-f9a9-wb1k-cygm
8
vulnerability VCID-fhwg-mggf-p3fx
9
vulnerability VCID-q9jc-5pc9-f3fq
10
vulnerability VCID-qdtc-vxt9-2fbt
11
vulnerability VCID-rtwc-5h7s-guge
12
vulnerability VCID-rz2t-u58z-eqh7
13
vulnerability VCID-t82h-zf9g-muep
14
vulnerability VCID-wty8-5znd-77hh
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@56.0.2-1
1
url pkg:alpm/archlinux/thunderbird@52.4.0-2
purl pkg:alpm/archlinux/thunderbird@52.4.0-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2pwv-h1am-hqbb
1
vulnerability VCID-4gwb-c8x5-tqbm
2
vulnerability VCID-f9a9-wb1k-cygm
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/thunderbird@52.4.0-2
References
0
reference_url https://security.archlinux.org/ASA-201711-23
reference_id ASA-201711-23
reference_type
scores
url https://security.archlinux.org/ASA-201711-23
1
reference_url https://security.archlinux.org/ASA-201711-43
reference_id ASA-201711-43
reference_type
scores
url https://security.archlinux.org/ASA-201711-43
2
reference_url https://security.archlinux.org/AVG-494
reference_id AVG-494
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-494
3
reference_url https://security.archlinux.org/AVG-530
reference_id AVG-530
reference_type
scores
0
value Critical
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-530
4
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2017-24
reference_id mfsa2017-24
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2017-24
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2017-25
reference_id mfsa2017-25
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2017-25
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2017-26
reference_id mfsa2017-26
reference_type
scores
0
value critical
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2017-26
Weaknesses
Exploits
Severity_range_score9.0 - 10.0
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-2pwv-h1am-hqbb