PT-2018-3172 · Mozilla+2 · Firefox+2

Abdulrahman Alqabandi

·

Publicado

2018-10-23

·

Atualizado

2024-12-12

·

CVE-2018-12401

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 63
Description The issue exists due to insufficient input validation, allowing a remote attacker to cause a denial of service using a specially crafted URI. Some special resource URIs can cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string, potentially leading to denial of service attacks.
Recommendations For versions prior to 63, update to version 63 or later to resolve the issue. As a temporary workaround, consider restricting the use of special resource URIs with optional parameters to minimize the risk of exploitation. Avoid using URIs with parameters following a '?' in the parsed string until the issue is resolved.

Correção

DoS

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALT-PU-2018-2645
ALT-PU-2019-2324
ALT-PU-2019-2486
BDU:2019-04303
CVE-2018-12401
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
USN-3801-1
USN-3801-2

Produtos afetados

Alt Linux
Firefox
Ubuntu