CVE-2018-18501

Sažetak

Mozilla developers and community members reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60.5, Firefox ESR < 60.5, and Firefox < 65.

Reference

http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00021.html
http://www.securityfocus.com/bid/106781
https://access.redhat.com/errata/RHSA-2019:0218
https://access.redhat.com/errata/RHSA-2019:0219
https://access.redhat.com/errata/RHSA-2019:0269
https://access.redhat.com/errata/RHSA-2019:0270
https://lists.debian.org/debian-lts-announce/2019/01/msg00025.html
https://lists.debian.org/debian-lts-announce/2019/02/msg00024.html
https://security.gentoo.org/glsa/201903-04
https://security.gentoo.org/glsa/201904-07
https://usn.ubuntu.com/3874-1/
https://usn.ubuntu.com/3897-1/
https://www.debian.org/security/2019/dsa-4376
https://www.debian.org/security/2019/dsa-4392
https://www.mozilla.org/security/advisories/mfsa2019-01/
https://www.mozilla.org/security/advisories/mfsa2019-02/
https://www.mozilla.org/security/advisories/mfsa2019-03/

CVSS

Base:	7.5
Impact:	6.4
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	PARTIAL	PARTIAL

CVSS vektor

AV:N/AC:L/Au:N/C:P/I:P/A:P

Zadnje važnije ažuriranje

02-04-2019 - 07:29

Objavljeno

05-02-2019 - 21:29