CVE-2018-5183 Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerabili...
CriticalCVSS 9.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/firefox-esr(Debian:12) | < 52.8.0esr-1 | 52.8.0esr-1 |
| debian/firefox-esr(Debian:13) | < 52.8.0esr-1 | 52.8.0esr-1 |
| debian/firefox-esr(Debian:14) | < 52.8.0esr-1 | 52.8.0esr-1 |
| debian/thunderbird(Debian:12) | < 1:52.8.0-1 | 1:52.8.0-1 |
| debian/thunderbird(Debian:13) | < 1:52.8.0-1 | 1:52.8.0-1 |
| debian/thunderbird(Debian:14) | < 1:52.8.0-1 | 1:52.8.0-1 |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 7.6 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat enterprise linux server tus | = 7.6 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 17.10 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| mozilla Firefox | < 52.8.0 | 52.8.0 |
| mozilla Thunderbird | < 52.8.0 | 52.8.0 |
Show 4 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla thunderbird esr | < 52.8.0 | 52.8.0 |
| mozilla thunderbird esr | < 52.8 | 52.8 |
| mozilla Thunderbird | < 52.8 | 52.8 |
| mozilla firefox esr | < 52.8 | 52.8 |
References
- Debian Security Tracker CVE-2018-5183 vendor-advisory
- 104138 third-party-advisory vdb-entry
- 1040898 third-party-advisory vdb-entry
- RHSA-2018:1414 third-party-advisory vendor-advisory
- RHSA-2018:1415 third-party-advisory vendor-advisory
- RHSA-2018:1725 third-party-advisory vendor-advisory
- RHSA-2018:1726 third-party-advisory vendor-advisory
- bugzilla.mozilla.org issue-tracking permissions-required
- [debian-lts-announce] 20180511 [SECURITY] [DLA 1376-1] firefox-esr security update mailing-list third-party-advisory
- [debian-lts-announce] 20180525 [SECURITY] [DLA 1382-1] thunderbird security update mailing-list third-party-advisory
- GLSA-201810-01 third-party-advisory vendor-advisory
- GLSA-201811-13 third-party-advisory vendor-advisory
- USN-3660-1 third-party-advisory vendor-advisory
- DSA-4199 third-party-advisory vendor-advisory
- DSA-4209 third-party-advisory vendor-advisory
- www.mozilla.org vendor-advisory
- www.mozilla.org vendor-advisory