PRIOn knowledge basePRION:CVE-2018-5129Memory corruption
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 17.10 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 7.0 | |
| debian_linux | eq | 9.0 | |
| firefox | lt | 59.0 | |
| firefox_esr | lt | 52.7.0 | |
| thunderbird | lt | 52.7.0 | |
| enterprise_linux_desktop | eq | 7.0 |
References
www.securityfocus.com/bid/103388
www.securitytracker.com/id/1040514
access.redhat.com/errata/RHSA-2018:0526
access.redhat.com/errata/RHSA-2018:0527
access.redhat.com/errata/RHSA-2018:0647
access.redhat.com/errata/RHSA-2018:0648
bugzilla.mozilla.org/show_bug.cgi?id=1428947
lists.debian.org/debian-lts-announce/2018/03/msg00010.html
lists.debian.org/debian-lts-announce/2018/03/msg00029.html
security.gentoo.org/glsa/201810-01
security.gentoo.org/glsa/201811-13
usn.ubuntu.com/3545-1/
usn.ubuntu.com/3596-1/
www.debian.org/security/2018/dsa-4139
www.debian.org/security/2018/dsa-4155
www.mozilla.org/security/advisories/mfsa2018-06/
www.mozilla.org/security/advisories/mfsa2018-07/
www.mozilla.org/security/advisories/mfsa2018-09/
Related
