CVE-2018-5145 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox ESR

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-120 — Classic Buffer Overflow9 documents8 sources
Severity
9.8CRITICALNVD
OSV8.8
EPSS
3.9%
top 11.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Mozilla Firefox ESRMozilla ThunderbirdMozilla Firefox+8 more
Timeline
PublishedJun 11
Latest updateMay 14

Description

Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages9 packages

▶NVDmozilla/firefox< 52.7.0
▶CVEListV5mozilla/firefox_esrunspecified — 52.7
▶CVEListV5mozilla/thunderbirdunspecified — 52.7
▶NVDmozilla/thunderbird< 52.7.0
▶Debianmozilla/thunderbird< 1:52.7.0-1+3

Also affects: Debian Linux 7.0, 8.0, 9.0, Ubuntu Linux 14.04, 16.04, 17.10, Enterprise Linux 7.4, 7.6, 7.5

🔴Vulnerability Details

4
GHSA
GHSA-576m-x596-j6g4: Memory safety bugs were reported in Firefox ESR 52↗2022-05-14
▶
OSV
CVE-2018-5145: Memory safety bugs were reported in Firefox ESR 52↗2018-06-11
▶
CVEList
CVE-2018-5145: Memory safety bugs were reported in Firefox ESR 52↗2018-06-11
▶
OSV
thunderbird vulnerabilities↗2018-03-29
▶

📋Vendor Advisories

3
Ubuntu
Thunderbird vulnerabilities↗2018-03-29
▶
Red Hat
Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)↗2018-03-14
▶
Debian
CVE-2018-5145: firefox-esr - Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence...↗2018
▶

💬Community

1
Bugzilla
CVE-2018-5145 Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)↗2018-03-14
▶
CVE-2018-5145 — Mozilla Firefox ESR vulnerability | cvebase