A buffer overflow can occur when manipulating the SVG “animatedPathSegList” through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.
CPE | Name | Operator | Version |
---|---|---|---|
ubuntu_linux | eq | 16.04 | |
ubuntu_linux | eq | 14.04 | |
ubuntu_linux | eq | 17.10 | |
debian_linux | eq | 8.0 | |
debian_linux | eq | 7.0 | |
debian_linux | eq | 9.0 | |
firefox | lt | 59.0 | |
firefox_esr | lt | 52.7.0 | |
thunderbird | lt | 52.7.0 | |
enterprise_linux_desktop | eq | 7.0 |
www.securityfocus.com/bid/103388
www.securitytracker.com/id/1040514
access.redhat.com/errata/RHSA-2018:0526
access.redhat.com/errata/RHSA-2018:0527
access.redhat.com/errata/RHSA-2018:0647
access.redhat.com/errata/RHSA-2018:0648
bugzilla.mozilla.org/show_bug.cgi?id=1430557
lists.debian.org/debian-lts-announce/2018/03/msg00010.html
lists.debian.org/debian-lts-announce/2018/03/msg00029.html
security.gentoo.org/glsa/201810-01
security.gentoo.org/glsa/201811-13
usn.ubuntu.com/3545-1/
usn.ubuntu.com/3596-1/
www.debian.org/security/2018/dsa-4139
www.debian.org/security/2018/dsa-4155
www.mozilla.org/security/advisories/mfsa2018-06/
www.mozilla.org/security/advisories/mfsa2018-07/
www.mozilla.org/security/advisories/mfsa2018-09/