Lucene search

K
mageiaGentoo FoundationMGASA-2018-0248
HistoryMay 17, 2018 - 1:54 p.m.

Updated firefox packages fix security vulnerabilities

2018-05-1713:54:59
Gentoo Foundation
advisories.mageia.org
17

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.122 Low

EPSS

Percentile

95.4%

Updated firefox packages fix security vulnerabilities: Mozilla: Memory safety bugs fixed in Firefox ESR 52.8 (CVE-2018-5150). Mozilla: Backport critical security fixes in Skia (CVE-2018-5183). Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154). Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155). Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157). Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158). Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159). Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168). Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178). Rootcerts has been updated to 20180411.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.122 Low

EPSS

Percentile

95.4%