ISOMAN

CVE

CVE-2018-5145

Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.

Severity
CRITICAL
CVSS
9.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. http://www.securityfocus.com/bid/103384
  2. http://www.securitytracker.com/id/1040514
  3. https://access.redhat.com/errata/RHSA-2018:0526
  4. https://access.redhat.com/errata/RHSA-2018:0527
  5. https://access.redhat.com/errata/RHSA-2018:0647
  6. https://access.redhat.com/errata/RHSA-2018:0648
  7. https://bugzilla.mozilla.org/buglist.cgi?bug_id=1261175%2C1348955
  8. https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html
  9. https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html
  10. https://security.gentoo.org/glsa/201811-13
  11. https://usn.ubuntu.com/3545-1/
  12. https://www.debian.org/security/2018/dsa-4139
  13. https://www.debian.org/security/2018/dsa-4155
  14. https://www.mozilla.org/security/advisories/mfsa2018-07/
  15. https://www.mozilla.org/security/advisories/mfsa2018-09/
  16. http://www.securityfocus.com/bid/103384
  17. http://www.securitytracker.com/id/1040514
  18. https://access.redhat.com/errata/RHSA-2018:0526
  19. https://access.redhat.com/errata/RHSA-2018:0527
  20. https://access.redhat.com/errata/RHSA-2018:0647