Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-12379
HistoryOct 18, 2018 - 1:29 p.m.

Out-of-bounds

2018-10-1813:29:00
PRIOn knowledge base
www.prio-n.com
5

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

28.1%

When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running the Mozilla Updater manually on the local system with the malicious MAR file in order to occur. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.