cbcvebase.
CVE-2018-18356
published 2018-12-11

CVE-2018-18356: An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit…

high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected

33 ranges· showing 25
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
chromiumchromium>= 0 < 71.0.3578.80-171.0.3578.80-1
chromiumchromium>= 0 < 71.0.3578.80-171.0.3578.80-1
chromiumchromium>= 0 < 71.0.3578.80-171.0.3578.80-1
chromiumchromium>= 0 < 71.0.3578.80-171.0.3578.80-1
debianchromium< chromium 71.0.3578.80-1 (bookworm)chromium 71.0.3578.80-1 (bookworm)
debiandebian_linux
debiandebian_linux
debianfirefox< chromium 71.0.3578.80-1 (bookworm)chromium 71.0.3578.80-1 (bookworm)
debianfirefox-esr< chromium 71.0.3578.80-1 (bookworm)chromium 71.0.3578.80-1 (bookworm)
debianthunderbird< chromium 71.0.3578.80-1 (bookworm)chromium 71.0.3578.80-1 (bookworm)
googlechrome< 71.0.3578.8071.0.3578.80
googlechrome>= unspecified < 71.0.3578.8071.0.3578.80
mozillathunderbird>= 0 < 1:60.5.1-11:60.5.1-1
mozillathunderbird>= 0 < 1:60.5.1-11:60.5.1-1
mozillathunderbird>= 0 < 1:60.5.1-11:60.5.1-1
mozillathunderbird>= 0 < 1:60.5.1-11:60.5.1-1
mozillathunderbird>= 0 < 1:60.5.1+build2-0ubuntu0.14.04.11:60.5.1+build2-0ubuntu0.14.04.1
mozillathunderbird>= 0 < 1:60.5.1+build2-0ubuntu0.16.04.11:60.5.1+build2-0ubuntu0.16.04.1
mozillathunderbird>= 0 < 1:60.5.1+build2-0ubuntu0.18.04.11:60.5.1+build2-0ubuntu0.18.04.1
opensuseleap
redhatenterprise_linux_desktop

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH