CVE-2018-5145
published 2018-06-11CVE-2018-5145: Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these…
critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.
Affected
31 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | firefox-esr | < firefox-esr 52.7.0esr-1 (bookworm) | firefox-esr 52.7.0esr-1 (bookworm) |
| debian | thunderbird | < firefox-esr 52.7.0esr-1 (bookworm) | firefox-esr 52.7.0esr-1 (bookworm) |
| mozilla | firefox | < 52.7.0 | 52.7.0 |
| mozilla | firefox_esr | >= unspecified < 52.7 | 52.7 |
| mozilla | thunderbird | < 52.7.0 | 52.7.0 |
| mozilla | thunderbird | >= 0 < 1:52.7.0-1 | 1:52.7.0-1 |
| mozilla | thunderbird | >= 0 < 1:52.7.0-1 | 1:52.7.0-1 |
| mozilla | thunderbird | >= 0 < 1:52.7.0-1 | 1:52.7.0-1 |
| mozilla | thunderbird | >= 0 < 1:52.7.0-1 | 1:52.7.0-1 |
| mozilla | thunderbird | >= 0 < 1:52.7.0+build1-0ubuntu0.14.04.1 | 1:52.7.0+build1-0ubuntu0.14.04.1 |
| mozilla | thunderbird | >= 0 < 1:52.7.0+build1-0ubuntu0.16.04.1 | 1:52.7.0+build1-0ubuntu0.16.04.1 |
| mozilla | thunderbird | >= unspecified < 52.7 | 52.7 |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_server_aus | — | — |
| redhat | enterprise_linux_server_aus | — | — |
| redhat | enterprise_linux_server_eus | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL