CVE-2017-5375
CRITICALThunderbird <45.7, Firefox ESR <45.7, Firefox <51 - Memory Corruption
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2017-5375. PoCs published by Rh0.
AI-analyzed exploit summary This exploit leverages CVE-2017-5375 (ASM.JS JIT-spray) and CVE-2016-2819 (Firefox memory corruption) to achieve arbitrary code execution by spraying fake Node objects and ASM.JS float constant pools to bypass ASLR/DEP, ultimately executing calc.exe.
Description
JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.
Exploits (3)
This exploit leverages CVE-2017-5375 (ASM.JS JIT-spray) and CVE-2016-2819 (Firefox memory corruption) to achieve arbitrary code execution by spraying fake Node objects and ASM.JS float constant pools to bypass ASLR/DEP, ultimately executing calc.exe.
This exploit leverages CVE-2017-5375 (and CVE-2016-1960) to bypass ASLR and DEP in Firefox 44.0.2 using an ASM.JS JIT spray technique. It manipulates Node objects and triggers a vulnerability to achieve arbitrary code execution, demonstrated by launching calc.exe.
This exploit leverages CVE-2017-5375 to bypass ASLR and DEP in Firefox 50.0.1 using an asm.js JIT spray technique, ultimately executing a shellcode payload that spawns cmd.exe.
References (15)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H