cbcvebase.
CVE-2018-12362
published 2018-10-18

CVE-2018-12362: An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially…

high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

Affected

42 ranges· showing 25
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debiandebian_linux
debianfirefox< firefox 61.0-1 (sid)firefox 61.0-1 (sid)
debianfirefox-esr< firefox 61.0-1 (sid)firefox 61.0-1 (sid)
debianthunderbird< firefox 61.0-1 (sid)firefox 61.0-1 (sid)
mozillafirefox< 61.061.0
mozillafirefox>= 0 < 61.0.1+build1-0ubuntu0.14.04.161.0.1+build1-0ubuntu0.14.04.1
mozillafirefox>= 0 < 61.0+build3-0ubuntu0.14.04.261.0+build3-0ubuntu0.14.04.2
mozillafirefox>= 0 < 61.0.1+build1-0ubuntu0.16.04.161.0.1+build1-0ubuntu0.16.04.1
mozillafirefox>= 0 < 61.0+build3-0ubuntu0.16.04.261.0+build3-0ubuntu0.16.04.2
mozillafirefox>= 0 < 61.0.1+build1-0ubuntu0.18.04.161.0.1+build1-0ubuntu0.18.04.1
mozillafirefox>= 0 < 61.0+build3-0ubuntu0.18.04.161.0+build3-0ubuntu0.18.04.1
mozillafirefox>= 53.0 < 60.1.060.1.0
mozillafirefox>= unspecified < 6161
mozillafirefox_esr< 52.952.9
mozillafirefox_esr>= unspecified < 60.160.1
mozillafirefox_esr>= unspecified < 52.952.9
mozillathunderbird< 52.952.9
mozillathunderbird>= 0 < 1:52.9.0-11:52.9.0-1
mozillathunderbird>= 0 < 1:52.9.0-11:52.9.0-1
mozillathunderbird>= 0 < 1:52.9.0-11:52.9.0-1

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH