Memory corruption

2018-10-1813:29:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.2%

JSON

Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.

CPENameOperatorVersion
ubuntu_linuxeq16.04
ubuntu_linuxeq14.04
ubuntu_linuxeq18.04
debian_linuxeq8.0
debian_linuxeq9.0
firefoxlt62.0
firefox_esrlt60.2.0
thunderbirdlt60.2.1
enterprise_linux_desktopeq7.0
enterprise_linux_desktopeq6.0

Name	Operator	Version
ubuntu_linux	eq	16.04
ubuntu_linux	eq	14.04
ubuntu_linux	eq	18.04
debian_linux	eq	8.0
debian_linux	eq	9.0
firefox	lt	62.0
firefox_esr	lt	60.2.0
thunderbird	lt	60.2.1
enterprise_linux_desktop	eq	7.0
enterprise_linux_desktop	eq	6.0

Rows per page:

1-10 of 181

References

www.securityfocus.com/bid/105280

www.securitytracker.com/id/1041610

access.redhat.com/errata/RHSA-2018:2692

access.redhat.com/errata/RHSA-2018:2693

access.redhat.com/errata/RHSA-2018:3403

access.redhat.com/errata/RHSA-2018:3458

bugzilla.mozilla.org/buglist.cgi?bug_id=1469309%2C1469914%2C1450989%2C1480092%2C1480517%2C1481093%2C1478575%2C1471953%2C1473161%2C1466991%2C1468738%2C1483120%2C1467363%2C1472925%2C1466577%2C1467889%2C1480521%2C1478849

lists.debian.org/debian-lts-announce/2018/11/msg00011.html

security.gentoo.org/glsa/201810-01

security.gentoo.org/glsa/201811-13

usn.ubuntu.com/3761-1/

usn.ubuntu.com/3793-1/

www.debian.org/security/2018/dsa-4287

www.debian.org/security/2018/dsa-4327

www.mozilla.org/security/advisories/mfsa2018-20/

www.mozilla.org/security/advisories/mfsa2018-21/

www.mozilla.org/security/advisories/mfsa2018-25/