PT-2018-3016 · Mozilla+5 · Firefox+5
Bruno Keith
+1
·
Publicado
2018-10-02
·
Atualizado
2024-12-12
·
CVE-2018-12387
CVSS v2.0
9.4
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Firefox ESR versions prior to 60.2.2
Firefox versions prior to 62.0.3
Description
The issue is related to the JavaScript JIT compiler inlining Array.prototype.push with multiple arguments, resulting in the stack pointer being off by 8 bytes after a bailout. This can leak a memory address to the calling function, potentially used as part of an exploit inside the sandboxed content process. The vulnerability is also described as being related to insufficient input validation in the implementation of the Array.prototype.push method in Firefox and Firefox ESR browsers, which could allow a remote attacker to execute arbitrary code.
Recommendations
For Firefox ESR versions prior to 60.2.2, update to version 60.2.2 or later.
For Firefox versions prior to 62.0.3, update to version 62.0.3 or later.
Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Firefox
Red Hat
Suse
Ubuntu