PT-2019-1342 · Mozilla+2 · Firefox+2
Markus Vervier
·
Publicado
2019-01-29
·
Atualizado
2024-12-12
·
CVE-2018-18504
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 65
Description
The issue is caused by a buffer overflow in the Texture Client Handler component of the Firefox browser, allowing a remote attacker to potentially cause a denial of service using a specially crafted web page. It can also lead to a crash and out-of-bounds read when a texture client's buffer is freed while still in use during graphic operations, potentially allowing the reading of memory from freed buffers.
Recommendations
For versions prior to 65, update to version 65 or later to resolve the issue. As a temporary workaround, consider restricting the use of graphic-intensive operations until a patch is applied.
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Firefox
Ubuntu