ISOMAN

CVE

CVE-2018-12365

A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

Severity
MEDIUM
CVSS
6.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.securityfocus.com/bid/104560
  2. http://www.securitytracker.com/id/1041193
  3. https://access.redhat.com/errata/RHSA-2018:2112
  4. https://access.redhat.com/errata/RHSA-2018:2113
  5. https://access.redhat.com/errata/RHSA-2018:2251
  6. https://access.redhat.com/errata/RHSA-2018:2252
  7. https://bugzilla.mozilla.org/show_bug.cgi?id=1459206
  8. https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html
  9. https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html
  10. https://security.gentoo.org/glsa/201810-01
  11. https://security.gentoo.org/glsa/201811-13
  12. https://usn.ubuntu.com/3705-1/
  13. https://usn.ubuntu.com/3714-1/
  14. https://www.debian.org/security/2018/dsa-4235
  15. https://www.debian.org/security/2018/dsa-4244
  16. https://www.mozilla.org/security/advisories/mfsa2018-15/
  17. https://www.mozilla.org/security/advisories/mfsa2018-16/
  18. https://www.mozilla.org/security/advisories/mfsa2018-17/
  19. https://www.mozilla.org/security/advisories/mfsa2018-18/
  20. https://www.mozilla.org/security/advisories/mfsa2018-19/