PT-2018-1348 · Mozilla+1 · Firefox+1

Khalil Zhani · Publicado 2018-01-23 · Atualizado 2024-12-12 · CVE-2018-5121

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 58

Description The issue is related to the incorrect rendering of some Tibetan characters in the address bar when using certain fonts on OS X. This can be exploited for domain name spoofing attacks when used as part of an Internationalized Domain Name (IDN). The attack only affects OS X operating systems, with other operating systems being unaffected.

Recommendations For Firefox versions prior to 58, update to version 58 or later to resolve the issue. As a temporary workaround, consider avoiding the use of Tibetan characters in the address bar or restricting access to potentially spoofed domains until the update is applied.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2018-1178

BDU:2018-00863

CVE-2018-5121

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

Produtos afetados

Alt Linux

Firefox

Referências · 1870

• https://suse.com/security/cve/CVE-2023-25728 · Nota
• https://suse.com/security/cve/CVE-2022-31743 · Nota
• https://suse.com/security/cve/CVE-2018-12392 · Nota
• https://suse.com/security/cve/CVE-2024-5698 · Nota
• https://suse.com/security/cve/CVE-2013-1701 · Nota
• https://suse.com/security/cve/CVE-2024-5687 · Nota
• https://suse.com/security/cve/CVE-2022-24713 · Nota
• https://suse.com/security/cve/CVE-2014-8642 · Nota
• https://suse.com/security/cve/CVE-2015-4516 · Nota
• https://suse.com/security/cve/CVE-2019-11716 · Nota
• https://suse.com/security/cve/CVE-2023-28176 · Nota
• https://suse.com/security/cve/CVE-2021-38494 · Nota
• https://suse.com/security/cve/CVE-2012-1965 · Nota
• https://suse.com/security/cve/CVE-2013-1687 · Nota
• https://suse.com/security/cve/CVE-2020-6822 · Nota