mozilla -- multiple vulnerabilities

2019-01-2900:00:00

vuxml.freebsd.org

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.42 Medium

EPSS

Percentile

97.3%

JSON

Mozilla Foundation reports:

CVE-2018-18500: Use-after-free parsing HTML5 stream
CVE-2018-18503: Memory corruption with Audio Buffer
CVE-2018-18504: Memory corruption and out-of-bounds read of texture client buffer
CVE-2018-18505: Privilege escalation through IPC channel messages
CVE-2018-18506: Proxy Auto-Configuration file can define localhost access to be proxied
CVE-2018-18502: Memory safety bugs fixed in Firefox 65
CVE-2018-18501: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfirefox< 65.0_1,1UNKNOWN
FreeBSDanynoarchwaterfox< 56.2.7UNKNOWN
FreeBSDanynoarchseamonkey< 2.53.0UNKNOWN
FreeBSDanynoarchlinux-seamonkey< 2.53.0UNKNOWN
FreeBSDanynoarchfirefox-esr< 60.5.0_1,1UNKNOWN
FreeBSDanynoarchlinux-firefox< 60.5.0,2UNKNOWN
FreeBSDanynoarchlibxul< 60.5.0UNKNOWN
FreeBSDanynoarchthunderbird< 60.5.0UNKNOWN
FreeBSDanynoarchlinux-thunderbird< 60.5.0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	firefox	< 65.0_1,1	UNKNOWN
FreeBSD	any	noarch	waterfox	< 56.2.7	UNKNOWN
FreeBSD	any	noarch	seamonkey	< 2.53.0	UNKNOWN
FreeBSD	any	noarch	linux-seamonkey	< 2.53.0	UNKNOWN
FreeBSD	any	noarch	firefox-esr	< 60.5.0_1,1	UNKNOWN
FreeBSD	any	noarch	linux-firefox	< 60.5.0,2	UNKNOWN
FreeBSD	any	noarch	libxul	< 60.5.0	UNKNOWN
FreeBSD	any	noarch	thunderbird	< 60.5.0	UNKNOWN
FreeBSD	any	noarch	linux-thunderbird	< 60.5.0	UNKNOWN