PT-2018-3295 · Mozilla+5 · Firefox Esr+7

Bob Owen

+13

·

Publicado

2018-10-23

·

Atualizado

2024-12-12

·

CVE-2018-12390

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 63 Firefox ESR versions prior to 60.3 Thunderbird versions prior to 60.3
Description The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with enough effort. It is also described as a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.
Recommendations For Firefox versions prior to 63, update to version 63 or later. For Firefox ESR versions prior to 60.3, update to version 60.3 or later. For Thunderbird versions prior to 60.3, update to version 60.3 or later.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2018-2550
ALT-PU-2018-2645
ALT-PU-2018-2669
ALT-PU-2019-2324
ALT-PU-2019-2486
BDU:2019-04569
CESA-2018_3005
CESA-2018_3006
CESA-2018_3531
CESA-2018_3532
CVE-2018-12390
DLA-1571-1
DLA-1575-1
DSA-4324-1
DSA-4337-1
MGASA-2018-0420
MGASA-2018-0480
OPENSUSE-SU-2018:3687-1
OPENSUSE-SU-2018_3435-1
OPENSUSE-SU-2018_3646-1
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:10601-1
OPENSUSE-SU-2024:14572-1
RHSA-2018:3005
RHSA-2018:3006
RHSA-2018:3531
RHSA-2018:3532
RHSA-2018_3005
RHSA-2018_3006
RHSA-2018_3531
RHSA-2018_3532
SUSE-SU-2018:3656-1
SUSE-SU-2018:3749-1
SUSE-SU-2018:3749-2
SUSE-SU-2018:3749-3
SUSE-SU-2018:3769-1
USN-3801-1
USN-3801-2
USN-3868-1

Produtos afetados

Alt Linux
Centos
Firefox
Firefox Esr
Red Hat
Suse
Thunderbird
Ubuntu