The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird, related to errors in memory object handling, allow attackers to execute arbitrary code.

🗓️ 13 Dec 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Vulnerabilities in Firefox, Firefox ESR, and Thunderbird due to memory object handling errors allow remote code execution.

Reporter	Title	Published	Views	Family All 80
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 60.1.0-alt1	26 Jun 201800:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 60.0-alt1	13 Aug 201800:00	–	altlinux
Tenable Nessus	Mozilla Firefox < 61 Multiple Vulnerabilities	21 Aug 201800:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 60.1 Multiple Vulnerabilities	21 Aug 201800:00	–	nessus
Tenable Nessus	Debian DLA-1575-1 : thunderbird security update	13 Nov 201800:00	–	nessus
Tenable Nessus	Debian DSA-4295-1 : thunderbird - security update	17 Sep 201800:00	–	nessus
Tenable Nessus	FreeBSD : mozilla -- multiple vulnerabilities (cd81806c-26e7-4d4a-8425-02724a2f48af)	27 Jun 201800:00	–	nessus
Tenable Nessus	GLSA-201810-01 : Mozilla Firefox: Multiple vulnerabilities	3 Oct 201800:00	–	nessus
Tenable Nessus	GLSA-201811-13 : Mozilla Thunderbird: Multiple vulnerabilities	26 Nov 201800:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 60.1 Multiple Vulnerabilities (macOS)	29 Jun 201800:00	–	nessus

Vulners

Node

mozilla thunderbirdRange<60.0

OR

mozilla firefoxRange<61

OR

mozilla firefox_esrRange<60.1.0

OR

novell opensuse_leapMatch42.3

OR

canonical ubuntuMatch17.10

OR

novell opensuse_leapMatch15.0

Source	Link
wiki	www.wiki.astralinux.ru/pages/viewpage.action
usn	www.usn.ubuntu.com/3705-1/
mozilla	www.mozilla.org/security/advisories/mfsa2018-15/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-5187
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2018-16/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2018-17/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2018-18/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2018-19/
debian	www.debian.org/security/2018/dsa-4295
web	www.web.nvd.nist.gov/view/vuln/detail

18 Feb 2020 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 39.8

CVSS 210

EPSS0.0298

firefox thunderbird memory object handling remote code execution