Lucene search
K

19 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:32 a.m.1 views

SUSE CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

9.8CVSS9.3AI score0.02921EPSS
Exploits0References18
RedhatCVE
RedhatCVE
added 2020/04/02 8:29 a.m.33 views

CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

9.8CVSS2.7AI score0.02921EPSS
Exploits0References2
Veracode
Veracode
added 2019/05/16 2:25 a.m.18 views

Use After Free

mozilla Firefox is vulnerable to use-after-free vulnerability. This occurs while enumerating attributes during SVG animations with clip paths leading to application crashes...

9.8CVSS9.3AI score0.02921EPSS
Exploits0References20Affected Software2
NVD
NVD
added 2018/06/11 9:29 p.m.11 views

CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

9.8CVSS6.9AI score0.02921EPSS
Exploits0References18
OSV
OSV
added 2018/06/11 9:29 p.m.1 views

DEBIAN-CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

9.8CVSS9.3AI score0.02921EPSS
Exploits0References1
Prion
Prion
added 2018/06/11 9:29 p.m.15 views

Design/Logic Flaw

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

7.5CVSS9.2AI score0.02921EPSS
Exploits0References18Affected Software12
Cvelist
Cvelist
added 2018/06/11 9:0 p.m.16 views

CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

7.2AI score0.02921EPSS
Exploits0References18
CVE
CVE
added 2018/06/11 9:0 p.m.188 views

CVE-2018-5154

CVE-2018-5154 is a use-after-free in the enumeration of attributes during SVG animations with clip paths, causing a potentially exploitable crash. Affected: Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, Firefox ESR

9.8CVSS7AI score0.02921EPSS
Exploits0References18Affected Software1
Debian CVE
Debian CVE
added 2018/06/11 9:0 p.m.23 views

CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

9.8CVSS10AI score0.02921EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2018/05/29 12:0 a.m.50 views

EulerOS 2.0 SP1 : firefox (EulerOS-SA-2018-1125)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use-after-free in compositor potentially allows code execution CVE-2018-5148 - Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8...

9.8CVSS7.9AI score0.43031EPSS
Exploits4References11
RedHat Linux
RedHat Linux
added 2018/05/24 7:59 p.m.3 views

Mozilla: Use-after-free with SVG animations and clip paths

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

9.8CVSS7.3AI score0.02921EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2018/05/24 7:31 p.m.3 views

Mozilla: Use-after-free with SVG animations and clip paths

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

9.8CVSS7.3AI score0.02921EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2018/05/17 12:0 a.m.31 views

SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2018:1319-1)

This update for MozillaFirefox to ESR 52.8 release fixes the following issues: Update to Firefox ESR 52.8 bsc1092548 Security issues fixed : - MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject JavaScript into PDF...

9.8CVSS7.7AI score0.43031EPSS
Exploits4References22
RedHat Linux
RedHat Linux
added 2018/05/14 3:19 p.m.2 views

Mozilla: Use-after-free with SVG animations and clip paths

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

9.8CVSS7.3AI score0.02921EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2018/05/14 2:48 p.m.1 views

Mozilla: Use-after-free with SVG animations and clip paths

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

9.8CVSS7.3AI score0.02921EPSS
Exploits0References5
CNVD
CNVD
added 2018/05/11 12:0 a.m.1 views

Mozilla Firefox Memory Misreference Vulnerability (CNVD-2018-10246)

Mozilla Firefox browser Firefox is a free, open source browser for Windows, Linux and MacOSX platforms. A memory misreference vulnerability exists in Mozilla Firefox when enumerating properties during SVG animations that use clip paths. An attacker could exploit this vulnerability to cause a deni...

9.8CVSS8.6AI score0.02921EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2018/05/10 12:0 a.m.25 views

CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

9.8CVSS7.2AI score0.02921EPSS
Exploits0References5
OSV
OSV
added 2018/05/10 12:0 a.m.0 views

UBUNTU-CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.8, Thunderbird ESR 52.8, Firefox 60, and Firefox ESR 52.8...

9.8CVSS7.3AI score0.02921EPSS
Exploits0References6
Opera Security Advisories
Opera Security Advisories
added 2013/01/29 12:0 a.m.7 views

Use of SVG clipPaths can allow execution of arbitrary code – Opera Security Advisories

When SVG documents with specifically prepared clipPaths are used in Opera, Opera may allow other content to overwrite the memory, before referencing the memory, which will lead to a crash. If an attacker can control the contents being written into memory, execution of arbitrary code may occur...

6.1AI score
Exploits0References1
Rows per page
Query Builder