Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2018-18511HistoryApr 26, 2019 - 5:29 p.m.
CVE-2018-18511
2019-04-2617:29:00
Debian Security Bug Tracker
security-tracker.debian.org
21
cross-origin
images
canvas
vulnerability
firefox
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.004
Percentile
74.1%
Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. Note: This only affects Firefox 65. Previous versions are unaffected.. This vulnerability affects Firefox < 65.0.1.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 65.0.1-1 | firefox_65.0.1-1_all.deb |
| Debian | 12 | all | firefox-esr | < 60.7.0esr-1 | firefox-esr_60.7.0esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 60.7.0esr-1 | firefox-esr_60.7.0esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 60.7.0esr-1 | firefox-esr_60.7.0esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 60.7.0esr-1 | firefox-esr_60.7.0esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:60.7.0-1 | thunderbird_1:60.7.0-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:60.7.0-1 | thunderbird_1:60.7.0-1_all.deb |
| Debian | 999 | all | thunderbird | < 1:60.7.0-1 | thunderbird_1:60.7.0-1_all.deb |
| Debian | 13 | all | thunderbird | < 1:60.7.0-1 | thunderbird_1:60.7.0-1_all.deb |
Related
ubuntucve
ubuntucve
CVE-2018-18511
2018-12-31 00:00:00
cve0day
cve0day
Mozilla Firefox CVE-2018-18511 Information Disclosure
2019-03-04 13:16:18
veracode
veracode
Information Disclosure
2019-05-27 00:39:13
prion
prion
Cross site scripting
2019-04-26 17:29:00
cvelist
cvelist
CVE-2018-18511
2019-04-26 16:13:22
cve
cve
CVE-2018-18511
2019-04-26 17:29:00
alpinelinux
alpinelinux
CVE-2018-18511
2019-04-26 17:29:00
nvd
nvd
CVE-2018-18511
2019-04-26 17:29:00
redhatcve
redhatcve
CVE-2018-18511
2020-04-01 20:13:30
ubuntu
ubuntu
Firefox vulnerabilities
2019-02-26 00:00:00
Thunderbird vulnerabilities
2019-05-28 00:00:00
nessus
nessus
FreeBSD : mozilla -- multiple vulnerabilities (18211552-f650-4d86-ba4f-e6d5cbfcdbeb)
2019-02-14 00:00:00
Mozilla Firefox < 65.0.1 Multiple Vulnerabilities
2019-03-29 00:00:00
Mozilla Firefox < 65.0.1
2019-02-15 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-3896-1)
2019-02-27 00:00:00
Mozilla Firefox Security Advisory (MFSA2019-04) - Linux
2021-11-08 00:00:00
CentOS Update for thunderbird CESA-2019:1310 centos6
2019-06-11 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2019-02-13 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Firefox 65.0.1 — Mozilla
2019-02-12 00:00:00
Security vulnerabilities fixed in Thunderbird 60.7 — Mozilla
2019-05-21 00:00:00
Security vulnerabilities fixed in Firefox ESR 60.7 — Mozilla
2019-05-21 00:00:00
archlinux
archlinux
[ASA-201902-16] firefox: multiple issues
2019-02-13 00:00:00
[ASA-201905-8] thunderbird: multiple issues
2019-05-23 00:00:00
kaspersky
kaspersky
KLA11416 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
2019-02-12 00:00:00
KLA11488 Multiple vulnerabilities in Mozilla Thunderbird
2019-05-21 00:00:00
KLA11487 Multiple vulnerabilities in Mozilla Firefox ESR
2019-05-21 00:00:00
redhat
redhat
(RHSA-2019:1308) Important: thunderbird security update
2019-06-03 20:24:05
(RHSA-2019:1309) Important: thunderbird security update
2019-06-03 20:24:17
(RHSA-2019:1310) Important: thunderbird security update
2019-06-03 20:24:28
oraclelinux
oraclelinux
thunderbird security update
2019-06-03 00:00:00
thunderbird security update
2019-07-30 00:00:00
thunderbird security update
2019-06-03 00:00:00
centos
centos
thunderbird security update
2019-06-10 22:49:17
thunderbird security update
2019-06-10 22:30:16
firefox security update
2019-05-29 19:47:30
amazon
amazon
Critical: thunderbird
2019-06-11 23:24:00
osv
osv
Red Hat Security Advisory: thunderbird security update
2024-09-16 02:34:45
Red Hat Security Advisory: thunderbird security update
2024-09-16 02:34:58
Red Hat Security Advisory: thunderbird security update
2024-09-16 02:34:51
debian
debian
[SECURITY] [DLA 1800-1] firefox-esr security update
2019-05-23 09:40:35
[SECURITY] [DLA 1806-1] thunderbird security update
2019-05-27 08:46:54
[SECURITY] [DSA 4451-1] thunderbird security update
2019-05-24 21:01:55
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2019-06-10 22:17:03
Updated firefox packages fix security vulnerabilities
2019-06-10 22:17:03
slackware
slackware
[slackware-security] mozilla-firefox
2019-05-21 23:35:28
suse
suse
Security update for MozillaThunderbird (important)
2019-06-02 00:00:00
Security update for MozillaFirefox (important)
2019-06-10 00:00:00
Security update for MozillaThunderbird (important)
2019-06-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 60.7.0-alt1
2019-05-20 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 60.7.0-alt1
2019-05-21 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
EPSS
0.004
Percentile
74.1%
Related for DEBIANCVE:CVE-2018-18511