Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-12406

Опубликовано: 11 дек. 2018
Источник: redhat
CVSS3: 8.8
EPSS Низкий

Описание

Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 64.

Отчет

This flaw did not affect the Firefox 60 ESR stream.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5firefoxNot affected
Red Hat Enterprise Linux 6firefoxNot affected
Red Hat Enterprise Linux 7firefoxNot affected
Red Hat Enterprise Linux 8firefoxNot affected

Показывать по

Дополнительная информация

Статус:

Critical
Дефект:
CWE-119->CWE-185
Дефект:
CWE-787
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1692732firefox: memory safety bugs showing evidence of memory corruption leading to run arbitrary code

EPSS

Процентиль: 59%
0.00372
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 7 лет назад

Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 64.

CVSS3: 8.8
nvd
почти 7 лет назад

Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 64.

CVSS3: 8.8
debian
почти 7 лет назад

Mozilla developers and community members reported memory safety bugs p ...

CVSS3: 8.8
github
больше 3 лет назад

Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 64.

CVSS3: 8.8
fstec
почти 7 лет назад

Уязвимость браузера Firefox, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 59%
0.00372
Низкий

8.8 High

CVSS3