ISOMAN

CVE

CVE-2018-12396

A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other events. This allows for potential privilege escalation by the WebExtension on sites where content scripts should not be run. This vulnerability affects Firefox ESR < 60.3 and Firefox < 63.

Severity
MEDIUM
CVSS
6.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.securityfocus.com/bid/105718
  2. http://www.securitytracker.com/id/1041944
  3. https://access.redhat.com/errata/RHSA-2018:3005
  4. https://access.redhat.com/errata/RHSA-2018:3006
  5. https://bugzilla.mozilla.org/show_bug.cgi?id=1483602
  6. https://lists.debian.org/debian-lts-announce/2018/11/msg00008.html
  7. https://security.gentoo.org/glsa/201811-04
  8. https://usn.ubuntu.com/3801-1/
  9. https://www.debian.org/security/2018/dsa-4324
  10. https://www.mozilla.org/security/advisories/mfsa2018-26/
  11. https://www.mozilla.org/security/advisories/mfsa2018-27/
  12. http://www.securityfocus.com/bid/105718
  13. http://www.securitytracker.com/id/1041944
  14. https://access.redhat.com/errata/RHSA-2018:3005
  15. https://access.redhat.com/errata/RHSA-2018:3006
  16. https://bugzilla.mozilla.org/show_bug.cgi?id=1483602
  17. https://lists.debian.org/debian-lts-announce/2018/11/msg00008.html
  18. https://security.gentoo.org/glsa/201811-04
  19. https://usn.ubuntu.com/3801-1/
  20. https://www.debian.org/security/2018/dsa-4324