PT-2018-3035 · Mozilla+5 · Firefox Esr+7

Alex Gaynor

+1

·

Publicado

2018-06-26

·

Atualizado

2024-12-12

·

CVE-2018-12366

CVSS v2.0

7.1

Alta

VetorAV:N/AC:M/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 61 Firefox ESR versions prior to 60.1 Thunderbird versions prior to 60
Description The issue is related to an invalid grid size during QCMS transformations, which can result in an out-of-bounds read. This could allow a remote attacker to leak protected information by reading beyond buffer boundaries.
Recommendations For Firefox versions prior to 61, update to version 61 or later to resolve the issue. For Firefox ESR versions prior to 60.1, update to version 60.1 or later to resolve the issue. For Thunderbird versions prior to 60, update to version 60 or later to resolve the issue.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2018-1952
ALT-PU-2018-1978
ALT-PU-2018-1985
ALT-PU-2018-2669
ALT-PU-2019-2324
ALT-PU-2019-2486
BDU:2019-03468
CESA-2018_2112
CESA-2018_2113
CESA-2018_2251
CESA-2018_2252
CVE-2018-12366
DLA-1406-1
DLA-1425-1
DSA-4235-1
DSA-4244-1
MGASA-2018-0305
MGASA-2018-0316
MGASA-2018-0321
MGASA-2018-0480
OPENSUSE-SU-2018:2807-1
OPENSUSE-SU-2018:3687-1
OPENSUSE-SU-2018_1833-1
OPENSUSE-SU-2018_1905-1
OPENSUSE-SU-2018_2330-1
OPENSUSE-SU-2018_2658-1
OPENSUSE-SU-2018_3051-1
OPENSUSE-SU-2024:10590-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:10601-1
OPENSUSE-SU-2024:14572-1
RHSA-2018:2112
RHSA-2018:2113
RHSA-2018:2251
RHSA-2018:2252
RHSA-2018_2112
RHSA-2018_2113
RHSA-2018_2251
RHSA-2018_2252
SUSE-SU-2018:2174-1
SUSE-SU-2018:2298-1
SUSE-SU-2018:2322-1
SUSE-SU-2018:2322-2
SUSE-SU-2018:2325-1
SUSE-SU-2018:3247-1
USN-3705-1
USN-3705-2
USN-3714-1

Produtos afetados

Alt Linux
Centos
Firefox
Firefox Esr
Red Hat
Suse
Thunderbird
Ubuntu