CVE-2018-5128 A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operations. This results in a potentially exploitable crash. This vulnerability affects....
CriticalCVSS 9.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during editor operations. This results in a potentially exploitable crash. This vulnerability affects Firefox < 59.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | < 59.0 | 59.0 |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.10 | No fix listed |
| mozilla Firefox | < 59 | 59 |
References
- 103386 third-party-advisory vdb-entry
- 1040514 third-party-advisory vdb-entry
- bugzilla.mozilla.org issue-tracking permissions-required
- USN-3596-1 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory