The vulnerabilities of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are related to an unacceptable grid size during QCMS transformations. This allows attackers to disclose protected information.

🗓️ 03 Oct 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Firefox, Firefox Extended Support Release, and Thunderbird have a grid size flaw in QCMS transformations that may disclose information beyond the buffer.

Reporter	Title	Published	Views	Family All 186
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM SONAS	1 Nov 201810:50	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 60.1.0-alt1	26 Jun 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 60.0-alt1	13 Aug 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version July	4 Jul 201800:00	–	altlinux
Tenable Nessus	Mozilla Firefox < 61 Multiple Vulnerabilities	21 Aug 201800:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 52.9 Multiple Vulnerabilities	21 Aug 201800:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 60.1 Multiple Vulnerabilities	21 Aug 201800:00	–	nessus
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2018-1061)	24 Aug 201800:00	–	nessus
Tenable Nessus	CentOS 6 : firefox (CESA-2018:2112)	16 Jul 201800:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (CESA-2018:2113)	12 Jul 201800:00	–	nessus

Vulners

Node

mozilla firefoxRange<61

mozilla firefox_esrRange<52.9

mozilla thunderbirdRange<52.9

mozilla thunderbirdRange52.9.1–60.0

mozilla firefox_esrRange53.0–60.1.0

red_hat red_hat_enterprise_linuxMatch6

red_hat red_hat_enterprise_linuxMatch7

novell opensuse_leapMatch42.3

canonical ubuntuMatch17.10

novell opensuse_leapMatch15.0

Source	Link
mozilla	www.mozilla.org/security/advisories/mfsa2018-15/
mozilla	www.mozilla.org/security/advisories/mfsa2018-16/
mozilla	www.mozilla.org/security/advisories/mfsa2018-17/
mozilla	www.mozilla.org/security/advisories/mfsa2018-18/
mozilla	www.mozilla.org/security/advisories/mfsa2018-19/
usn	www.usn.ubuntu.com/3705-1/
usn	www.usn.ubuntu.com/3714-1/
lists	www.lists.debian.org/debian-lts-announce/2018/06/msg00014.html
lists	www.lists.debian.org/debian-lts-announce/2018/07/msg00013.html
cve	www.cve.basealt.ru/otchet-po-obnovleniiam-ot-08072019.html

01 Dec 2021 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 36.5

CVSS 27.1

EPSS0.0102