An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 60.1, Thunderbird < 60, and Firefox < 61.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1465686 | Exploit Issue Tracking Patch Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2018-15/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2018-16/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2018-19/ | Vendor Advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1465686 | Exploit Issue Tracking Patch Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2018-15/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2018-16/ | Vendor Advisory |
| https://www.mozilla.org/security/advisories/mfsa2018-19/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1465686 - Exploit, Issue Tracking, Patch, Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2018-15/ - Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2018-16/ - Vendor Advisory | |
| References | () https://www.mozilla.org/security/advisories/mfsa2018-19/ - Vendor Advisory |
Information
Published : 2020-07-09 14:15
Updated : 2024-11-21 03:45
NVD link : CVE-2018-12371
Mitre link : CVE-2018-12371
CVE.ORG link : CVE-2018-12371
JSON object : View
Products Affected
mozilla
- thunderbird
- firefox
- firefox_esr
CWE
CWE-190
Integer Overflow or Wraparound