NetSight
IP …
high8.8

CVE-2018-5127

A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script.

Impact

A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.

Affected products

VendorProductAffected versions
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Version 7.4
RedhatEnterprise Linux Server Eus
Versions 7.4, 7.5
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
DebianDebian Linux
Versions 7.0, 8.0, 9.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10
MozillaFirefox
before 52.7.0
before 59.0
MozillaThunderbird
before 52.7.0

Weakness classification

CWE-119

References