CVE Database›Document archive›CVE-2017-7757

CVE-2017-7757

Mozilla: Use-after-free in IndexedDB (MFSA 2017-16)

Loading…

Severity

Moderate

Red Hat Product Security

9.8

CVSS 3.0

Review impact separately from score.

Published · June 14, 2017

Updated · November 26, 2025

Description

A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE not specified