NetSight
IP …
critical9.8

CVE-2018-5154

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths.

Impact

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.

Affected products

VendorProductAffected versions
DebianDebian Linux
Versions 7.0, 8.0, 9.0
RedhatEnterprise Linux Desktop
Versions 6.0, 7.0
RedhatEnterprise Linux Server
Versions 6.0, 7.0
RedhatEnterprise Linux Server Aus
Version 7.6
RedhatEnterprise Linux Server Eus
Versions 7.5, 7.6
RedhatEnterprise Linux Server Tus
Version 7.6
RedhatEnterprise Linux Workstation
Versions 6.0, 7.0
MozillaFirefox
before 52.8.0
before 60.0
MozillaThunderbird
before 52.8.0
MozillaThunderbird Esr
before 52.8.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10, 18.04

Weakness classification

CWE-416

References