NetSight
IP …
critical9.8

CVE-2018-5095

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM.

Impact

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 8.0, 9.0
RedhatEnterprise Linux
Versions 6.0, 7.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Versions 7.3, 7.4
RedhatEnterprise Linux Server Eus
Versions 7.3, 7.4, 7.5
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
MozillaFirefox
before 58.0
before 52.6.0
MozillaThunderbird
before 52.6.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10

Weakness classification

CWE-190CWE-908

References