NetSight
IP …
critical9.8

CVE-2018-5150

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.

Impact

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Version 7.6
RedhatEnterprise Linux Server Eus
Versions 7.5, 7.6
RedhatEnterprise Linux Server Tus
Version 7.6
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
MozillaFirefox
before 52.8.0
before 60.0
MozillaThunderbird
before 52.8.0
MozillaThunderbird Esr
before 52.8.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10, 18.04

Weakness classification

CWE-119

References