ISOMAN

CVE

CVE-2018-5091

A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.securityfocus.com/bid/102783
  2. http://www.securitytracker.com/id/1040270
  3. https://access.redhat.com/errata/RHSA-2018:0122
  4. https://bugzilla.mozilla.org/show_bug.cgi?id=1423086
  5. https://lists.debian.org/debian-lts-announce/2018/01/msg00030.html
  6. https://usn.ubuntu.com/3544-1/
  7. https://www.debian.org/security/2018/dsa-4096
  8. https://www.debian.org/security/2018/dsa-4102
  9. https://www.mozilla.org/security/advisories/mfsa2018-02/
  10. https://www.mozilla.org/security/advisories/mfsa2018-03/
  11. http://www.securityfocus.com/bid/102783
  12. http://www.securitytracker.com/id/1040270
  13. https://access.redhat.com/errata/RHSA-2018:0122
  14. https://bugzilla.mozilla.org/show_bug.cgi?id=1423086
  15. https://lists.debian.org/debian-lts-announce/2018/01/msg00030.html
  16. https://usn.ubuntu.com/3544-1/
  17. https://www.debian.org/security/2018/dsa-4096
  18. https://www.debian.org/security/2018/dsa-4102
  19. https://www.mozilla.org/security/advisories/mfsa2018-02/
  20. https://www.mozilla.org/security/advisories/mfsa2018-03/