NetSight
IP …
critical9.8

CVE-2018-5097

A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the…

Impact

A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Version 7.4
RedhatEnterprise Linux Server Eus
Versions 7.4, 7.5
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
MozillaFirefox
before 58.0
before 52.6.0
MozillaThunderbird
before 52.6.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10

Weakness classification

CWE-416

References