PT-2018-2994 · Mozilla+3 · Firefox+3

Andreas Perhson · Publicado 2018-05-09 · Atualizado 2024-12-12 · CVE-2018-5160

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 60 Firefox versions prior to 60

Description The issue is related to the WrappedI420Buffer function in the WebRTC component of the Firefox browser, which can lead to a buffer overflow in memory. This can cause a potentially exploitable crash when the WebRTC encoder uses uninitialized memory.

Recommendations For Firefox ESR versions prior to 60, update to version 60 or later to resolve the issue. For Firefox versions prior to 60, update to version 60 or later to resolve the issue.

Correção

Use of Uninitialized Resource

Use After Free

Buffer Overflow

Enumeração de Fraquezas

CWE-908

CWE-416

CWE-119

Identificadores relacionados

ALT-PU-2018-1787

ALT-PU-2018-1854

BDU:2019-03313

CVE-2018-5160

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

SUSE-SU-2019:2872-1

USN-3645-1

USN-3645-2

Produtos afetados

Alt Linux

Firefox

Suse

Ubuntu

Referências · 1932

• https://suse.com/security/cve/CVE-2023-25728 · Nota
• https://suse.com/security/cve/CVE-2022-31743 · Nota
• https://suse.com/security/cve/CVE-2018-12392 · Nota
• https://suse.com/security/cve/CVE-2024-5698 · Nota
• https://suse.com/security/cve/CVE-2013-1701 · Nota
• https://bdu.fstec.ru/vul/2019-03313 · Nota de Segurança
• https://suse.com/security/cve/CVE-2024-5687 · Nota
• https://suse.com/security/cve/CVE-2022-24713 · Nota
• https://suse.com/security/cve/CVE-2014-8642 · Nota
• https://suse.com/security/cve/CVE-2015-4516 · Nota
• https://suse.com/security/cve/CVE-2019-11716 · Nota
• https://suse.com/security/cve/CVE-2023-28176 · Nota
• https://suse.com/security/cve/CVE-2021-38494 · Nota
• https://suse.com/security/cve/CVE-2012-1965 · Nota
• https://suse.com/security/cve/CVE-2013-1687 · Nota