PT-2018-3403 · Mozilla+5 · Firefox+6
Aaylasecura1138
·
Publicado
2018-12-31
·
Atualizado
2024-12-12
·
CVE-2018-18511
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Firefox versions prior to 65.0.1
Thunderbird (affected versions not specified)
Description:
The issue is related to the TransferFromImageBitmap method, which allows for the reading of a canvas element, ignoring security policies. This can enable a remote attacker to gain unauthorized access to information. The problem violates the same-origin policy, allowing cross-origin images to be read from a canvas element.
Recommendations:
For Firefox versions prior to 65.0.1, update to version 65.0.1 or later to resolve the issue.
For Thunderbird, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Firefox
Red Hat
Suse
Thunderbird
Ubuntu