Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-5156

Опубликовано: 18 окт. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.5
CVSS3: 9.8

Описание

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

РелизСтатусПримечание
artful

released

61.0+build3-0ubuntu0.17.10.1
bionic

released

61.0+build3-0ubuntu0.18.04.1
devel

released

61.0.1+build1-0ubuntu0.18.04.1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [61.0+build3-0ubuntu0.14.04.2]]
precise/esm

DNE

trusty

released

61.0+build3-0ubuntu0.14.04.2
trusty/esm

DNE

trusty was released [61.0+build3-0ubuntu0.14.04.2]
upstream

released

61.0
xenial

released

61.0+build3-0ubuntu0.16.04.2

Показывать по

EPSS

Процентиль: 86%
0.03107
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
redhat
больше 7 лет назад

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

CVSS3: 9.8
nvd
около 7 лет назад

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

CVSS3: 9.8
debian
около 7 лет назад

A vulnerability can occur when capturing a media stream when the media ...

CVSS3: 9.8
github
больше 3 лет назад

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

CVSS3: 9.8
fstec
около 7 лет назад

Уязвимость механизма записи потока мультимедиа веб-браузеров Firefox, Firefox ESR и программы для работы с электронной почтой Thunderbird, связанная с некорректной проверкой типа источника данных, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 86%
0.03107
Низкий

7.5 High

CVSS2

9.8 Critical

CVSS3