PT-2018-1841 · Mozilla+5 · Firefox Esr+6

Daniel Veditz

+1

·

Publicado

2018-07-05

·

Atualizado

2024-06-15

·

CVE-2018-12389

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Firefox ESR versions prior to 60.3 Thunderbird versions prior to 60.3
Description: The issue is related to an integer overflow, which may allow a remote attacker to execute arbitrary code. It has been reported that memory safety bugs are present, showing evidence of memory corruption, and it is presumed that these could be exploited with enough effort.
Recommendations: For Firefox ESR versions prior to 60.3, update to version 60.3 or later. For Thunderbird versions prior to 60.3, update to version 60.3 or later.

Correção

Buffer Overflow

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

ALT-PU-2018-1985
ALT-PU-2018-2550
ALT-PU-2018-2669
BDU:2018-01443
CESA-2018_3005
CESA-2018_3006
CESA-2018_3531
CESA-2018_3532
CVE-2018-12389
DLA-1571-1
DLA-1575-1
DSA-4324-1
DSA-4337-1
MGASA-2018-0420
MGASA-2018-0480
OPENSUSE-SU-2018:3687-1
OPENSUSE-SU-2018_3435-1
OPENSUSE-SU-2018_3646-1
OPENSUSE-SU-2024:10601-1
RHSA-2018:3005
RHSA-2018:3006
RHSA-2018:3531
RHSA-2018:3532
RHSA-2018_3005
RHSA-2018_3006
RHSA-2018_3531
RHSA-2018_3532
SUSE-SU-2018:3656-1
SUSE-SU-2018:3749-1
SUSE-SU-2018:3749-2
SUSE-SU-2018:3749-3
SUSE-SU-2018:3769-1
SUSE-SU-2018_3656-1
SUSE-SU-2018_3749-1
SUSE-SU-2018_3749-2
SUSE-SU-2018_3749-3
USN-3868-1

Produtos afetados

Alt Linux
Centos
Firefox Esr
Red Hat
Suse
Thunderbird
Ubuntu