PT-2018-3030 · Mozilla+3 · Firefox Esr+5

R

·

Publicado

2018-06-26

·

Atualizado

2024-12-12

·

CVE-2018-12361

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 61 Firefox ESR versions prior to 60.1 Thunderbird versions prior to 60
Description The issue is caused by an integer overflow in the SwizzleData function, which can lead to a potentially exploitable crash when used for graphics computations with unsanitized inputs. This may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations For Firefox versions prior to 61, update to version 61 or later. For Firefox ESR versions prior to 60.1, update to version 60.1 or later. For Thunderbird versions prior to 60, update to version 60 or later.

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2018-1952
ALT-PU-2018-1985
ALT-PU-2018-2669
ALT-PU-2019-2324
ALT-PU-2019-2486
BDU:2019-03463
CVE-2018-12361
DLA-1575-1
DSA-4295-1
MGASA-2018-0480
OPENSUSE-SU-2018:3687-1
OPENSUSE-SU-2018_1833-1
OPENSUSE-SU-2018_2658-1
OPENSUSE-SU-2018_3051-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:10601-1
OPENSUSE-SU-2024:14572-1
SUSE-SU-2018:3247-1
USN-3705-1
USN-3705-2

Produtos afetados

Alt Linux
Firefox
Firefox Esr
Suse
Thunderbird
Ubuntu