Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-12389

Опубликовано: 23 окт. 2018
Источник: redhat
CVSS3: 8.8

Описание

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 60.3 and Thunderbird < 60.3.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 8firefoxNot affected
Red Hat Enterprise Linux 8thunderbirdNot affected
Red Hat Enterprise Linux 6firefoxFixedRHSA-2018:300624.10.2018
Red Hat Enterprise Linux 6thunderbirdFixedRHSA-2018:353109.11.2018
Red Hat Enterprise Linux 7firefoxFixedRHSA-2018:300524.10.2018
Red Hat Enterprise Linux 7thunderbirdFixedRHSA-2018:353209.11.2018

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-120
https://bugzilla.redhat.com/show_bug.cgi?id=1642179Mozilla: Memory safety bugs fixed in Firefox ESR 60.3

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 6 лет назад

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 60.3 and Thunderbird < 60.3.

CVSS3: 8.8
nvd
больше 6 лет назад

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 60.3 and Thunderbird < 60.3.

CVSS3: 8.8
debian
больше 6 лет назад

Mozilla developers and community members reported memory safety bugs p ...

CVSS3: 8.8
github
больше 3 лет назад

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 60.3 and Thunderbird < 60.3.

CVSS3: 9.6
fstec
около 7 лет назад

Уязвимость веб-браузера Firefox ESR и почтового клиента Thunderbird, связанная с целочисленным переполнением, позволяющая нарушителю выполнить произвольный код

8.8 High

CVSS3