PT-2018-3038 · Mozilla+4 · Firefox Esr+6

Abbaolk

·

Publicado

2018-06-26

·

Atualizado

2024-12-12

·

CVE-2018-12371

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 60.1 Thunderbird versions prior to 60 Firefox versions prior to 61
Description The issue is caused by an integer overflow vulnerability in the Skia library when allocating memory for edge builders on systems with at least 16 GB of RAM. This results in the use of uninitialized memory, potentially leading to a crash that could be exploited. The vulnerability may allow a remote attacker to cause a denial of service.
Recommendations For Firefox ESR versions prior to 60.1, update to version 60.1 or later. For Thunderbird versions prior to 60, update to version 60 or later. For Firefox versions prior to 61, update to version 61 or later.

Exploit

Correção

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2018-1952
ALT-PU-2018-1985
ALT-PU-2018-2669
ALT-PU-2019-2324
ALT-PU-2019-2486
BDU:2019-03471
CVE-2018-12371
DLA-1575-1
DSA-4295-1
MGASA-2018-0480
OPENSUSE-SU-2018:3687-1
OPENSUSE-SU-2018_1833-1
OPENSUSE-SU-2018_2658-1
OPENSUSE-SU-2018_3051-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:10601-1
OPENSUSE-SU-2024:14572-1
SUSE-SU-2018:3247-1
USN-3705-1
USN-3705-2

Produtos afetados

Alt Linux
Firefox
Firefox Esr
Skia
Suse
Thunderbird
Ubuntu