PT-2018-3015 · Mozilla+5 · Firefox+5

Bruno Keith + 2 · Published 2018-10-02 · Updated 2024-12-12 · CVE-2018-12386

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 62.0.3 Firefox ESR versions prior to 60.2.2

Description A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. The issue is related to errors in data type conversion.

Recommendations For Firefox versions prior to 62.0.3, update to version 62.0.3 or later to resolve the issue. For Firefox ESR versions prior to 60.2.2, update to version 60.2.2 or later to resolve the issue.

Exploit

Fix

RCE

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

Related Identifiers

ALT-PU-2018-2417

ALT-PU-2018-2423

ALT-PU-2019-2324

ALT-PU-2019-2486

BDU:2019-03414

CESA-2018_2881

CESA-2018_2884

CVE-2018-12386

DSA-4310-1

MGASA-2018-0396

OPENSUSE-SU-2018_2996-1

OPENSUSE-SU-2024:10600-1

OPENSUSE-SU-2024:14572-1

RHSA-2018:2881

RHSA-2018:2884

RHSA-2018_2881

RHSA-2018_2884

SUSE-SU-2018:3476-1

SUSE-SU-2018:3591-1

SUSE-SU-2018:3591-2

USN-3778-1

Affected Products

Alt Linux

Centos

Firefox

Red Hat

Suse

Ubuntu

References · 1934

• 🔥 https://github.com/0vercl0k/CVE-2019-11708 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2019-9810 · Exploit
• 🔥 https://github.com/niklasb/sploits/blob/master/firefox/rce-register-misalloc.js · Exploit
• 🔥 https://github.com/xuechiyaobai/CVE-2019-9810-PoC · Exploit
• 🔥 https://github.com/sophoslabs/CVE-2018-18500 · Exploit
• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1493900 · Exploit
• 🔥❌ https://github.com/alidnf/CVE-2019-11730 · Exploit, Deleted
• https://osv.dev/vulnerability/USN-3778-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0396 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:3591-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-12386 · Security Note
• https://wiki.astralinux.ru/pages/viewpage.action?pageId=44892734 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://usn.ubuntu.com/3778-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:2884 · Vendor Advisory