Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-5178

Опубликовано: 11 июн. 2018
Источник: ubuntu
Приоритет: low
EPSS Средний
CVSS2: 6.8
CVSS3: 8.1

Описание

A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.

РелизСтатусПримечание
artful

released

1:52.8.0+build1-0ubuntu0.17.10.1
bionic

released

1:52.8.0+build1-0ubuntu0.18.04.1
devel

released

1:60.2.1+build1-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [1:52.8.0+build1-0ubuntu0.14.04.1]]
precise/esm

DNE

trusty

released

1:52.8.0+build1-0ubuntu0.14.04.1
trusty/esm

DNE

trusty was released [1:52.8.0+build1-0ubuntu0.14.04.1]
upstream

released

52.8.0
xenial

released

1:52.8.0+build1-0ubuntu0.16.04.1

Показывать по

EPSS

Процентиль: 95%
0.18917
Средний

6.8 Medium

CVSS2

8.1 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
больше 7 лет назад

A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.

CVSS3: 8.1
nvd
больше 7 лет назад

A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.

CVSS3: 8.1
debian
больше 7 лет назад

A buffer overflow was found during UTF8 to Unicode string conversion w ...

CVSS3: 8.1
github
больше 3 лет назад

A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.

CVSS3: 8.1
fstec
больше 7 лет назад

Уязвимость браузеров Firefox ESR, Firefox и почтового клиента Thunderbird, связанная с выходом операции за границы буфера в памяти во время преобразования строки UTF-8 в Unicode, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 95%
0.18917
Средний

6.8 Medium

CVSS2

8.1 High

CVSS3