csaf_redhat - rhsa-2018

rhsa-2018_2112

Vulnerability from csaf_redhat

Published

2018-06-28 16:23

Modified

2024-11-15 03:05

Summary

Red Hat Security Advisory: firefox security update

Notes

Topic

An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.1.0 ESR. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 (CVE-2018-5188) * Mozilla: Buffer overflow using computed size of canvas element (CVE-2018-12359) * Mozilla: Use-after-free using focus() (CVE-2018-12360) * Mozilla: Media recorder segmentation fault when track type is changed during capture (CVE-2018-5156) * Skia: Heap buffer overflow rasterizing paths in SVG (CVE-2018-6126) * Mozilla: Integer overflow in SSSE3 scaler (CVE-2018-12362) * Mozilla: Use-after-free when appending DOM nodes (CVE-2018-12363) * Mozilla: CSRF attacks through 307 redirects and NPAPI plugins (CVE-2018-12364) * Mozilla: address bar username and password spoofing in reader mode (CVE-2017-7762) * Mozilla: Compromised IPC child process can list local filenames (CVE-2018-12365) * Mozilla: Invalid data handling during QCMS transformations (CVE-2018-12366) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Alex Gaynor, Christoph Diehl, Christian Holler, Jason Kratzer, David Major, Jon Coppeard, Nicolas B. Pierron, Marcia Knous, Ronald Crane, Nils, F. Alonso (revskills), David Black, and OSS-Fuzz as the original reporters.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for firefox is now available for Red Hat Enterprise Linux 6.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nThis update upgrades Firefox to version 60.1.0 ESR.\n\nSecurity Fix(es):\n\n* Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9 (CVE-2018-5188)\n\n* Mozilla: Buffer overflow using computed size of canvas element (CVE-2018-12359)\n\n* Mozilla: Use-after-free using focus() (CVE-2018-12360)\n\n* Mozilla: Media recorder segmentation fault when track type is changed during capture (CVE-2018-5156)\n\n* Skia: Heap buffer overflow rasterizing paths in SVG (CVE-2018-6126)\n\n* Mozilla: Integer overflow in SSSE3 scaler (CVE-2018-12362)\n\n* Mozilla: Use-after-free when appending DOM nodes (CVE-2018-12363)\n\n* Mozilla: CSRF attacks through 307 redirects and NPAPI plugins (CVE-2018-12364)\n\n* Mozilla: address bar username and password spoofing in reader mode (CVE-2017-7762)\n\n* Mozilla: Compromised IPC child process can list local filenames (CVE-2018-12365)\n\n* Mozilla: Invalid data handling during QCMS transformations (CVE-2018-12366)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nRed Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Alex Gaynor, Christoph Diehl, Christian Holler, Jason Kratzer, David Major, Jon Coppeard, Nicolas B. Pierron, Marcia Knous, Ronald Crane, Nils, F. Alonso (revskills), David Black, and OSS-Fuzz as the original reporters.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2018:2112",
        "url": "https://access.redhat.com/errata/RHSA-2018:2112"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/",
        "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/"
      },
      {
        "category": "external",
        "summary": "1584035",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1584035"
      },
      {
        "category": "external",
        "summary": "1590493",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1590493"
      },
      {
        "category": "external",
        "summary": "1595024",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595024"
      },
      {
        "category": "external",
        "summary": "1595025",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595025"
      },
      {
        "category": "external",
        "summary": "1595027",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595027"
      },
      {
        "category": "external",
        "summary": "1595028",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595028"
      },
      {
        "category": "external",
        "summary": "1595029",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595029"
      },
      {
        "category": "external",
        "summary": "1595030",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595030"
      },
      {
        "category": "external",
        "summary": "1595031",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595031"
      },
      {
        "category": "external",
        "summary": "1595037",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595037"
      },
      {
        "category": "external",
        "summary": "1595040",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595040"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2112.json"
      }
    ],
    "title": "Red Hat Security Advisory: firefox security update",
    "tracking": {
      "current_release_date": "2024-11-15T03:05:17+00:00",
      "generator": {
        "date": "2024-11-15T03:05:17+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2018:2112",
      "initial_release_date": "2018-06-28T16:23:08+00:00",
      "revision_history": [
        {
          "date": "2018-06-28T16:23:08+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2018-06-28T16:23:08+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-15T03:05:17+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop Optional (v. 6)",
                  "product_id": "6Client-optional-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux HPC Node Optional (v. 6)",
                  "product_id": "6ComputeNode-optional-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::computenode"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server (v. 6)",
                  "product_id": "6Server-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation Optional (v. 6)",
                  "product_id": "6Workstation-optional-6.10.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:60.1.0-5.el6.x86_64",
                "product": {
                  "name": "firefox-debuginfo-0:60.1.0-5.el6.x86_64",
                  "product_id": "firefox-debuginfo-0:60.1.0-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@60.1.0-5.el6?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:60.1.0-5.el6.x86_64",
                "product": {
                  "name": "firefox-0:60.1.0-5.el6.x86_64",
                  "product_id": "firefox-0:60.1.0-5.el6.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@60.1.0-5.el6?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:60.1.0-5.el6.i686",
                "product": {
                  "name": "firefox-debuginfo-0:60.1.0-5.el6.i686",
                  "product_id": "firefox-debuginfo-0:60.1.0-5.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@60.1.0-5.el6?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:60.1.0-5.el6.i686",
                "product": {
                  "name": "firefox-0:60.1.0-5.el6.i686",
                  "product_id": "firefox-0:60.1.0-5.el6.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@60.1.0-5.el6?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:60.1.0-5.el6.src",
                "product": {
                  "name": "firefox-0:60.1.0-5.el6.src",
                  "product_id": "firefox-0:60.1.0-5.el6.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@60.1.0-5.el6?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:60.1.0-5.el6.s390x",
                "product": {
                  "name": "firefox-debuginfo-0:60.1.0-5.el6.s390x",
                  "product_id": "firefox-debuginfo-0:60.1.0-5.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@60.1.0-5.el6?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:60.1.0-5.el6.s390x",
                "product": {
                  "name": "firefox-0:60.1.0-5.el6.s390x",
                  "product_id": "firefox-0:60.1.0-5.el6.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@60.1.0-5.el6?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:60.1.0-5.el6.ppc64",
                "product": {
                  "name": "firefox-debuginfo-0:60.1.0-5.el6.ppc64",
                  "product_id": "firefox-debuginfo-0:60.1.0-5.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@60.1.0-5.el6?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-0:60.1.0-5.el6.ppc64",
                "product": {
                  "name": "firefox-0:60.1.0-5.el6.ppc64",
                  "product_id": "firefox-0:60.1.0-5.el6.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@60.1.0-5.el6?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-0:60.1.0-5.el6.src"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.src",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Client-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.src",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)",
          "product_id": "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Client-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.src",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)",
          "product_id": "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6ComputeNode-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-0:60.1.0-5.el6.src"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.src",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)",
          "product_id": "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Server-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.src",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Server-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.src",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.src",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.i686",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.ppc64",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.s390x",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:60.1.0-5.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)",
          "product_id": "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:60.1.0-5.el6.x86_64",
        "relates_to_product_reference": "6Workstation-optional-6.10.z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-7762",
      "cwe": {
        "id": "CWE-290",
        "name": "Authentication Bypass by Spoofing"
      },
      "discovery_date": "2018-06-11T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1590493"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox \u003c 54.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: address bar username and password spoofing in reader mode",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this issue as having a security impact of Moderate, and a future update may address this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-7762"
        },
        {
          "category": "external",
          "summary": "RHBZ#1590493",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1590493"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-7762",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-7762"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-7762",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7762"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/"
        }
      ],
      "release_date": "2017-04-20T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-06-28T16:23:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: address bar username and password spoofing in reader mode"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2018-5156",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-06-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1595037"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Media recorder segmentation fault when track type is changed during capture",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5156"
        },
        {
          "category": "external",
          "summary": "RHBZ#1595037",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595037"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5156",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5156"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5156",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5156"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-5156",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-5156"
        }
      ],
      "release_date": "2018-06-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-06-28T16:23:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Media recorder segmentation fault when track type is changed during capture"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Alex Gaynor",
            "Christoph Diehl",
            "Christian Holler",
            "Jason Kratzer",
            "David Major",
            "Jon Coppeard",
            "Nicolas B. Pierron",
            "Marcia Knous",
            "Ronald Crane"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2018-5188",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-06-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1595040"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5188"
        },
        {
          "category": "external",
          "summary": "RHBZ#1595040",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595040"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5188",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5188"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5188",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5188"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-5188",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-5188"
        }
      ],
      "release_date": "2018-06-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-06-28T16:23:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and Firefox ESR 52.9"
    },
    {
      "cve": "CVE-2018-6126",
      "discovery_date": "2018-05-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1584035"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Skia: Heap buffer overflow rasterizing paths in SVG",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-6126"
        },
        {
          "category": "external",
          "summary": "RHBZ#1584035",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1584035"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-6126",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-6126"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-6126",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-6126"
        },
        {
          "category": "external",
          "summary": "https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html",
          "url": "https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html"
        }
      ],
      "release_date": "2018-05-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-06-28T16:23:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Skia: Heap buffer overflow rasterizing paths in SVG"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2018-12359",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-06-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1595024"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Buffer overflow using computed size of canvas element",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12359"
        },
        {
          "category": "external",
          "summary": "RHBZ#1595024",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595024"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12359",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12359"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12359",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12359"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12359",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12359"
        }
      ],
      "release_date": "2018-06-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-06-28T16:23:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Buffer overflow using computed size of canvas element"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2018-12360",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2018-06-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1595025"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free using focus()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12360"
        },
        {
          "category": "external",
          "summary": "RHBZ#1595025",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595025"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12360",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12360"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12360",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12360"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12360",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12360"
        }
      ],
      "release_date": "2018-06-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-06-28T16:23:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free using focus()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "F. Alonso"
          ],
          "organization": "revskills",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2018-12362",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "discovery_date": "2018-06-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1595027"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Integer overflow in SSSE3 scaler",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12362"
        },
        {
          "category": "external",
          "summary": "RHBZ#1595027",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595027"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12362",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12362"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12362",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12362"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12362",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12362"
        }
      ],
      "release_date": "2018-06-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-06-28T16:23:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Integer overflow in SSSE3 scaler"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2018-12363",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2018-06-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1595028"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free when appending DOM nodes",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12363"
        },
        {
          "category": "external",
          "summary": "RHBZ#1595028",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595028"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12363",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12363"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12363",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12363"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12363",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12363"
        }
      ],
      "release_date": "2018-06-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-06-28T16:23:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free when appending DOM nodes"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "David Black"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2018-12364",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "discovery_date": "2018-06-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1595029"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious site to engage in cross-site request forgery (CSRF) attacks. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: CSRF attacks through 307 redirects and NPAPI plugins",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12364"
        },
        {
          "category": "external",
          "summary": "RHBZ#1595029",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595029"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12364",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12364"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12364",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12364"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12364",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12364"
        }
      ],
      "release_date": "2018-06-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-06-28T16:23:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: CSRF attacks through 307 redirects and NPAPI plugins"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Alex Gaynor"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2018-12365",
      "cwe": {
        "id": "CWE-552",
        "name": "Files or Directories Accessible to External Parties"
      },
      "discovery_date": "2018-06-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1595030"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Compromised IPC child process can list local filenames",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12365"
        },
        {
          "category": "external",
          "summary": "RHBZ#1595030",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595030"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12365",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12365"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12365",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12365"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12365",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12365"
        }
      ],
      "release_date": "2018-06-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-06-28T16:23:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Compromised IPC child process can list local filenames"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "OSS-Fuzz"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2018-12366",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2018-06-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1595031"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Invalid data handling during QCMS transformations",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
          "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
          "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-12366"
        },
        {
          "category": "external",
          "summary": "RHBZ#1595031",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1595031"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-12366",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-12366"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-12366",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-12366"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12366",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12366"
        }
      ],
      "release_date": "2018-06-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2018-06-28T16:23:08+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing the update, Firefox must be restarted for the changes to take effect.",
          "product_ids": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Client-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Client-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6ComputeNode-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6ComputeNode-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Server-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Server-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.src",
            "6Workstation-optional-6.10.z:firefox-0:60.1.0-5.el6.x86_64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.i686",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.ppc64",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.s390x",
            "6Workstation-optional-6.10.z:firefox-debuginfo-0:60.1.0-5.el6.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Invalid data handling during QCMS transformations"
    }
  ]
}

cve-2017-7762

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 16:12

Severity ?

Summary

When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox < 54.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:2112	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-15/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038689	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:2113	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1358248	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/99047	vdb-entry, x_refsource_BID

Impacted products

▼	Vendor	Product
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:12:28.256Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2018:2112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2112"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-15/"
          },
          {
            "name": "1038689",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038689"
          },
          {
            "name": "RHSA-2018:2113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1358248"
          },
          {
            "name": "99047",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99047"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "54",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-06-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox \u003c 54."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Addressbar spoofing in Reader mode",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-29T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2018:2112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-15/"
        },
        {
          "name": "1038689",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038689"
        },
        {
          "name": "RHSA-2018:2113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1358248"
        },
        {
          "name": "99047",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/99047"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7762",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "54"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar. This can be used for spoofing the domain of the current page. This vulnerability affects Firefox \u003c 54."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Addressbar spoofing in Reader mode"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2018:2112",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2112"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-15/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-15/"
            },
            {
              "name": "1038689",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038689"
            },
            {
              "name": "RHSA-2018:2113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2113"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1358248",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1358248"
            },
            {
              "name": "99047",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/99047"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-7762",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-04-12T00:00:00",
    "dateUpdated": "2024-08-05T16:12:28.256Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-6126

Vulnerability from cvelistv5

Published

2019-01-09 19:00

Modified

2024-08-05 05:54

Severity ?

Summary

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201810-01	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/104411	vdb-entry, x_refsource_BID
	http://www.securityfocus.com/bid/104309	vdb-entry, x_refsource_BID
	https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2112	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1041014	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2018:1815	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2113	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1041046	vdb-entry, x_refsource_SECTRACK
	https://www.debian.org/security/2018/dsa-4220	vendor-advisory, x_refsource_DEBIAN
	https://www.exploit-db.com/exploits/45098/	exploit, x_refsource_EXPLOIT-DB
	https://crbug.com/844457	x_refsource_MISC
	https://www.debian.org/security/2018/dsa-4237	vendor-advisory, x_refsource_DEBIAN

Impacted products

▼	Vendor	Product
	Google	Chrome

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:54:53.166Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-01"
          },
          {
            "name": "104411",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104411"
          },
          {
            "name": "104309",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104309"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html"
          },
          {
            "name": "RHSA-2018:2112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2112"
          },
          {
            "name": "1041014",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041014"
          },
          {
            "name": "RHSA-2018:1815",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1815"
          },
          {
            "name": "RHSA-2018:2113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2113"
          },
          {
            "name": "1041046",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041046"
          },
          {
            "name": "DSA-4220",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4220"
          },
          {
            "name": "45098",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/45098/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://crbug.com/844457"
          },
          {
            "name": "DSA-4237",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4237"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "67.0.3396.62",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2019-01-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Heap buffer overflow",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-01-10T10:57:01",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "name": "GLSA-201810-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-01"
        },
        {
          "name": "104411",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104411"
        },
        {
          "name": "104309",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104309"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html"
        },
        {
          "name": "RHSA-2018:2112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        },
        {
          "name": "1041014",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041014"
        },
        {
          "name": "RHSA-2018:1815",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1815"
        },
        {
          "name": "RHSA-2018:2113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2113"
        },
        {
          "name": "1041046",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041046"
        },
        {
          "name": "DSA-4220",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4220"
        },
        {
          "name": "45098",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/45098/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://crbug.com/844457"
        },
        {
          "name": "DSA-4237",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4237"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@google.com",
          "ID": "CVE-2018-6126",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Chrome",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "67.0.3396.62"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Google"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Heap buffer overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-01"
            },
            {
              "name": "104411",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104411"
            },
            {
              "name": "104309",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104309"
            },
            {
              "name": "https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html",
              "refsource": "CONFIRM",
              "url": "https://chromereleases.googleblog.com/2018/05/stable-channel-update-for-desktop_58.html"
            },
            {
              "name": "RHSA-2018:2112",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2112"
            },
            {
              "name": "1041014",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041014"
            },
            {
              "name": "RHSA-2018:1815",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1815"
            },
            {
              "name": "RHSA-2018:2113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2113"
            },
            {
              "name": "1041046",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041046"
            },
            {
              "name": "DSA-4220",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4220"
            },
            {
              "name": "45098",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/45098/"
            },
            {
              "name": "https://crbug.com/844457",
              "refsource": "MISC",
              "url": "https://crbug.com/844457"
            },
            {
              "name": "DSA-4237",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4237"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2018-6126",
    "datePublished": "2019-01-09T19:00:00",
    "dateReserved": "2018-01-23T00:00:00",
    "dateUpdated": "2024-08-05T05:54:53.166Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-12359

Vulnerability from cvelistv5

Published

2018-10-18 13:00

Modified

2024-08-05 08:30

Severity ?

Summary

A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1459162	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201810-01	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/104555	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2018-15/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2112	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201811-13	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2018/dsa-4235	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2018-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2113	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-16/	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4244	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1041193	vdb-entry, x_refsource_SECTRACK
	https://www.mozilla.org/security/advisories/mfsa2018-19/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2252	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-17/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2251	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3705-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3714-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:30:59.942Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459162"
          },
          {
            "name": "GLSA-201810-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-01"
          },
          {
            "name": "104555",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104555"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
          },
          {
            "name": "RHSA-2018:2112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2112"
          },
          {
            "name": "GLSA-201811-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-13"
          },
          {
            "name": "DSA-4235",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4235"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
          },
          {
            "name": "RHSA-2018:2113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
          },
          {
            "name": "DSA-4244",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4244"
          },
          {
            "name": "1041193",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041193"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
          },
          {
            "name": "RHSA-2018:2252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2252"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
          },
          {
            "name": "RHSA-2018:2251",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2251"
          },
          {
            "name": "USN-3705-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3705-1/"
          },
          {
            "name": "USN-3714-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3714-1/"
          },
          {
            "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "61",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-06-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer overflow using computed size of canvas element",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-25T10:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459162"
        },
        {
          "name": "GLSA-201810-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-01"
        },
        {
          "name": "104555",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104555"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
        },
        {
          "name": "RHSA-2018:2112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        },
        {
          "name": "GLSA-201811-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-13"
        },
        {
          "name": "DSA-4235",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4235"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
        },
        {
          "name": "RHSA-2018:2113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
        },
        {
          "name": "DSA-4244",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4244"
        },
        {
          "name": "1041193",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041193"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
        },
        {
          "name": "RHSA-2018:2252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2252"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
        },
        {
          "name": "RHSA-2018:2251",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2251"
        },
        {
          "name": "USN-3705-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3705-1/"
        },
        {
          "name": "USN-3714-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3714-1/"
        },
        {
          "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-12359",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "61"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer overflow using computed size of canvas element"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459162",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459162"
            },
            {
              "name": "GLSA-201810-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-01"
            },
            {
              "name": "104555",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104555"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-15/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
            },
            {
              "name": "RHSA-2018:2112",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2112"
            },
            {
              "name": "GLSA-201811-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-13"
            },
            {
              "name": "DSA-4235",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4235"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
            },
            {
              "name": "RHSA-2018:2113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2113"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-16/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
            },
            {
              "name": "DSA-4244",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4244"
            },
            {
              "name": "1041193",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041193"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
            },
            {
              "name": "RHSA-2018:2252",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2252"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-17/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
            },
            {
              "name": "RHSA-2018:2251",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2251"
            },
            {
              "name": "USN-3705-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3705-1/"
            },
            {
              "name": "USN-3714-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3714-1/"
            },
            {
              "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-12359",
    "datePublished": "2018-10-18T13:00:00",
    "dateReserved": "2018-06-14T00:00:00",
    "dateUpdated": "2024-08-05T08:30:59.942Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-5188

Vulnerability from cvelistv5

Published

2018-10-18 13:00

Modified

2024-08-05 05:26

Severity ?

Summary

Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201810-01	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/104555	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2018-15/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2112	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3749-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/201811-13	vendor-advisory, x_refsource_GENTOO
	https://www.mozilla.org/security/advisories/mfsa2018-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2113	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-16/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1456189%2C1456975%2C1465898%2C1392739%2C1451297%2C1464063%2C1437842%2C1442722%2C1452576%2C1450688%2C1458264%2C1458270%2C1465108%2C1464829%2C1464079%2C1463494%2C1458048	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4244	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2018-19/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2252	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-17/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2251	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3705-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3714-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:26:46.950Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-01"
          },
          {
            "name": "104555",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104555"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
          },
          {
            "name": "RHSA-2018:2112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2112"
          },
          {
            "name": "USN-3749-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3749-1/"
          },
          {
            "name": "GLSA-201811-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-13"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
          },
          {
            "name": "RHSA-2018:2113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1456189%2C1456975%2C1465898%2C1392739%2C1451297%2C1464063%2C1437842%2C1442722%2C1452576%2C1450688%2C1458264%2C1458270%2C1465108%2C1464829%2C1464079%2C1463494%2C1458048"
          },
          {
            "name": "DSA-4244",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4244"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
          },
          {
            "name": "RHSA-2018:2252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2252"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
          },
          {
            "name": "RHSA-2018:2251",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2251"
          },
          {
            "name": "USN-3705-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3705-1/"
          },
          {
            "name": "USN-3714-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3714-1/"
          },
          {
            "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "61",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-06-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox ESR 52.9, and Thunderbird 60",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-25T10:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "GLSA-201810-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-01"
        },
        {
          "name": "104555",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104555"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
        },
        {
          "name": "RHSA-2018:2112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        },
        {
          "name": "USN-3749-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3749-1/"
        },
        {
          "name": "GLSA-201811-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-13"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
        },
        {
          "name": "RHSA-2018:2113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1456189%2C1456975%2C1465898%2C1392739%2C1451297%2C1464063%2C1437842%2C1442722%2C1452576%2C1450688%2C1458264%2C1458270%2C1465108%2C1464829%2C1464079%2C1463494%2C1458048"
        },
        {
          "name": "DSA-4244",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4244"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
        },
        {
          "name": "RHSA-2018:2252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2252"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
        },
        {
          "name": "RHSA-2018:2251",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2251"
        },
        {
          "name": "USN-3705-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3705-1/"
        },
        {
          "name": "USN-3714-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3714-1/"
        },
        {
          "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-5188",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "61"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox ESR 52.9, and Thunderbird 60"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-01"
            },
            {
              "name": "104555",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104555"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-15/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
            },
            {
              "name": "RHSA-2018:2112",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2112"
            },
            {
              "name": "USN-3749-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3749-1/"
            },
            {
              "name": "GLSA-201811-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-13"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
            },
            {
              "name": "RHSA-2018:2113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2113"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-16/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
            },
            {
              "name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1456189%2C1456975%2C1465898%2C1392739%2C1451297%2C1464063%2C1437842%2C1442722%2C1452576%2C1450688%2C1458264%2C1458270%2C1465108%2C1464829%2C1464079%2C1463494%2C1458048",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1456189%2C1456975%2C1465898%2C1392739%2C1451297%2C1464063%2C1437842%2C1442722%2C1452576%2C1450688%2C1458264%2C1458270%2C1465108%2C1464829%2C1464079%2C1463494%2C1458048"
            },
            {
              "name": "DSA-4244",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4244"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
            },
            {
              "name": "RHSA-2018:2252",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2252"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-17/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
            },
            {
              "name": "RHSA-2018:2251",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2251"
            },
            {
              "name": "USN-3705-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3705-1/"
            },
            {
              "name": "USN-3714-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3714-1/"
            },
            {
              "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-5188",
    "datePublished": "2018-10-18T13:00:00",
    "dateReserved": "2018-01-03T00:00:00",
    "dateUpdated": "2024-08-05T05:26:46.950Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-12364

Vulnerability from cvelistv5

Published

2018-10-18 13:00

Modified

2024-08-05 08:31

Severity ?

Summary

NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious site to engage in cross-site request forgery (CSRF) attacks. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201810-01	vendor-advisory, x_refsource_GENTOO
	https://www.mozilla.org/security/advisories/mfsa2018-15/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2112	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201811-13	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2018/dsa-4235	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2018-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2113	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-16/	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4244	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/104560	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041193	vdb-entry, x_refsource_SECTRACK
	https://www.mozilla.org/security/advisories/mfsa2018-19/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2252	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1436241	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2018-17/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2251	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3705-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3714-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:31:00.279Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
          },
          {
            "name": "RHSA-2018:2112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2112"
          },
          {
            "name": "GLSA-201811-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-13"
          },
          {
            "name": "DSA-4235",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4235"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
          },
          {
            "name": "RHSA-2018:2113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
          },
          {
            "name": "DSA-4244",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4244"
          },
          {
            "name": "104560",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104560"
          },
          {
            "name": "1041193",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041193"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
          },
          {
            "name": "RHSA-2018:2252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2252"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1436241"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
          },
          {
            "name": "RHSA-2018:2251",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2251"
          },
          {
            "name": "USN-3705-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3705-1/"
          },
          {
            "name": "USN-3714-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3714-1/"
          },
          {
            "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "61",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-06-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious site to engage in cross-site request forgery (CSRF) attacks. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CSRF attacks through 307 redirects and NPAPI plugins",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-25T10:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "GLSA-201810-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
        },
        {
          "name": "RHSA-2018:2112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        },
        {
          "name": "GLSA-201811-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-13"
        },
        {
          "name": "DSA-4235",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4235"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
        },
        {
          "name": "RHSA-2018:2113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
        },
        {
          "name": "DSA-4244",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4244"
        },
        {
          "name": "104560",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104560"
        },
        {
          "name": "1041193",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041193"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
        },
        {
          "name": "RHSA-2018:2252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2252"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1436241"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
        },
        {
          "name": "RHSA-2018:2251",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2251"
        },
        {
          "name": "USN-3705-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3705-1/"
        },
        {
          "name": "USN-3714-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3714-1/"
        },
        {
          "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-12364",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "61"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 redirect to the target site. This allows for a malicious site to engage in cross-site request forgery (CSRF) attacks. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CSRF attacks through 307 redirects and NPAPI plugins"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-01"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-15/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
            },
            {
              "name": "RHSA-2018:2112",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2112"
            },
            {
              "name": "GLSA-201811-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-13"
            },
            {
              "name": "DSA-4235",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4235"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
            },
            {
              "name": "RHSA-2018:2113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2113"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-16/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
            },
            {
              "name": "DSA-4244",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4244"
            },
            {
              "name": "104560",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104560"
            },
            {
              "name": "1041193",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041193"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
            },
            {
              "name": "RHSA-2018:2252",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2252"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1436241",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1436241"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-17/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
            },
            {
              "name": "RHSA-2018:2251",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2251"
            },
            {
              "name": "USN-3705-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3705-1/"
            },
            {
              "name": "USN-3714-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3714-1/"
            },
            {
              "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-12364",
    "datePublished": "2018-10-18T13:00:00",
    "dateReserved": "2018-06-14T00:00:00",
    "dateUpdated": "2024-08-05T08:31:00.279Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-12363

Vulnerability from cvelistv5

Published

2018-10-18 13:00

Modified

2024-08-05 08:30

Severity ?

Summary

A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201810-01	vendor-advisory, x_refsource_GENTOO
	https://www.mozilla.org/security/advisories/mfsa2018-15/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2112	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201811-13	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2018/dsa-4235	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2018-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2113	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-16/	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4244	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/104560	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041193	vdb-entry, x_refsource_SECTRACK
	https://www.mozilla.org/security/advisories/mfsa2018-19/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2252	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-17/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2251	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3705-1/	vendor-advisory, x_refsource_UBUNTU
	https://bugzilla.mozilla.org/show_bug.cgi?id=1464784	x_refsource_CONFIRM
	https://usn.ubuntu.com/3714-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:30:59.771Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
          },
          {
            "name": "RHSA-2018:2112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2112"
          },
          {
            "name": "GLSA-201811-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-13"
          },
          {
            "name": "DSA-4235",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4235"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
          },
          {
            "name": "RHSA-2018:2113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
          },
          {
            "name": "DSA-4244",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4244"
          },
          {
            "name": "104560",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104560"
          },
          {
            "name": "1041193",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041193"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
          },
          {
            "name": "RHSA-2018:2252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2252"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
          },
          {
            "name": "RHSA-2018:2251",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2251"
          },
          {
            "name": "USN-3705-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3705-1/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1464784"
          },
          {
            "name": "USN-3714-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3714-1/"
          },
          {
            "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "61",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-06-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free when appending DOM nodes",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-25T10:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "GLSA-201810-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
        },
        {
          "name": "RHSA-2018:2112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        },
        {
          "name": "GLSA-201811-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-13"
        },
        {
          "name": "DSA-4235",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4235"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
        },
        {
          "name": "RHSA-2018:2113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
        },
        {
          "name": "DSA-4244",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4244"
        },
        {
          "name": "104560",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104560"
        },
        {
          "name": "1041193",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041193"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
        },
        {
          "name": "RHSA-2018:2252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2252"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
        },
        {
          "name": "RHSA-2018:2251",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2251"
        },
        {
          "name": "USN-3705-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3705-1/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1464784"
        },
        {
          "name": "USN-3714-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3714-1/"
        },
        {
          "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-12363",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "61"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free when appending DOM nodes"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-01"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-15/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
            },
            {
              "name": "RHSA-2018:2112",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2112"
            },
            {
              "name": "GLSA-201811-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-13"
            },
            {
              "name": "DSA-4235",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4235"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
            },
            {
              "name": "RHSA-2018:2113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2113"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-16/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
            },
            {
              "name": "DSA-4244",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4244"
            },
            {
              "name": "104560",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104560"
            },
            {
              "name": "1041193",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041193"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
            },
            {
              "name": "RHSA-2018:2252",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2252"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-17/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
            },
            {
              "name": "RHSA-2018:2251",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2251"
            },
            {
              "name": "USN-3705-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3705-1/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1464784",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1464784"
            },
            {
              "name": "USN-3714-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3714-1/"
            },
            {
              "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-12363",
    "datePublished": "2018-10-18T13:00:00",
    "dateReserved": "2018-06-14T00:00:00",
    "dateUpdated": "2024-08-05T08:30:59.771Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-12362

Vulnerability from cvelistv5

Published

2018-10-18 13:00

Modified

2024-08-05 08:30

Severity ?

Summary

An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201810-01	vendor-advisory, x_refsource_GENTOO
	https://www.mozilla.org/security/advisories/mfsa2018-15/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2112	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201811-13	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2018/dsa-4235	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2018-18/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1452375	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2113	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-16/	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4244	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/104560	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041193	vdb-entry, x_refsource_SECTRACK
	https://www.mozilla.org/security/advisories/mfsa2018-19/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2252	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-17/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2251	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3705-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3714-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:30:59.696Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
          },
          {
            "name": "RHSA-2018:2112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2112"
          },
          {
            "name": "GLSA-201811-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-13"
          },
          {
            "name": "DSA-4235",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4235"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1452375"
          },
          {
            "name": "RHSA-2018:2113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
          },
          {
            "name": "DSA-4244",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4244"
          },
          {
            "name": "104560",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104560"
          },
          {
            "name": "1041193",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041193"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
          },
          {
            "name": "RHSA-2018:2252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2252"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
          },
          {
            "name": "RHSA-2018:2251",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2251"
          },
          {
            "name": "USN-3705-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3705-1/"
          },
          {
            "name": "USN-3714-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3714-1/"
          },
          {
            "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "61",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-06-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Integer overflow in SSSE3 scaler",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-25T10:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "GLSA-201810-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
        },
        {
          "name": "RHSA-2018:2112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        },
        {
          "name": "GLSA-201811-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-13"
        },
        {
          "name": "DSA-4235",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4235"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1452375"
        },
        {
          "name": "RHSA-2018:2113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
        },
        {
          "name": "DSA-4244",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4244"
        },
        {
          "name": "104560",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104560"
        },
        {
          "name": "1041193",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041193"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
        },
        {
          "name": "RHSA-2018:2252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2252"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
        },
        {
          "name": "RHSA-2018:2251",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2251"
        },
        {
          "name": "USN-3705-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3705-1/"
        },
        {
          "name": "USN-3714-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3714-1/"
        },
        {
          "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-12362",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "61"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Integer overflow in SSSE3 scaler"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-01"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-15/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
            },
            {
              "name": "RHSA-2018:2112",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2112"
            },
            {
              "name": "GLSA-201811-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-13"
            },
            {
              "name": "DSA-4235",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4235"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1452375",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1452375"
            },
            {
              "name": "RHSA-2018:2113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2113"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-16/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
            },
            {
              "name": "DSA-4244",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4244"
            },
            {
              "name": "104560",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104560"
            },
            {
              "name": "1041193",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041193"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
            },
            {
              "name": "RHSA-2018:2252",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2252"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-17/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
            },
            {
              "name": "RHSA-2018:2251",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2251"
            },
            {
              "name": "USN-3705-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3705-1/"
            },
            {
              "name": "USN-3714-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3714-1/"
            },
            {
              "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-12362",
    "datePublished": "2018-10-18T13:00:00",
    "dateReserved": "2018-06-14T00:00:00",
    "dateUpdated": "2024-08-05T08:30:59.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-12360

Vulnerability from cvelistv5

Published

2018-10-18 13:00

Modified

2024-08-05 08:30

Severity ?

Summary

A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201810-01	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/104555	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2018-15/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2112	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201811-13	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2018/dsa-4235	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2018-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2113	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-16/	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4244	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1041193	vdb-entry, x_refsource_SECTRACK
	https://www.mozilla.org/security/advisories/mfsa2018-19/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2252	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1459693	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2018-17/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2251	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3705-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3714-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:30:59.673Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-01"
          },
          {
            "name": "104555",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104555"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
          },
          {
            "name": "RHSA-2018:2112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2112"
          },
          {
            "name": "GLSA-201811-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-13"
          },
          {
            "name": "DSA-4235",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4235"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
          },
          {
            "name": "RHSA-2018:2113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
          },
          {
            "name": "DSA-4244",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4244"
          },
          {
            "name": "1041193",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041193"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
          },
          {
            "name": "RHSA-2018:2252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2252"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459693"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
          },
          {
            "name": "RHSA-2018:2251",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2251"
          },
          {
            "name": "USN-3705-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3705-1/"
          },
          {
            "name": "USN-3714-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3714-1/"
          },
          {
            "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "61",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-06-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free when using focus()",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-25T10:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "GLSA-201810-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-01"
        },
        {
          "name": "104555",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104555"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
        },
        {
          "name": "RHSA-2018:2112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        },
        {
          "name": "GLSA-201811-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-13"
        },
        {
          "name": "DSA-4235",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4235"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
        },
        {
          "name": "RHSA-2018:2113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
        },
        {
          "name": "DSA-4244",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4244"
        },
        {
          "name": "1041193",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041193"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
        },
        {
          "name": "RHSA-2018:2252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2252"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459693"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
        },
        {
          "name": "RHSA-2018:2251",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2251"
        },
        {
          "name": "USN-3705-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3705-1/"
        },
        {
          "name": "USN-3714-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3714-1/"
        },
        {
          "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-12360",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "61"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free when using focus()"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-01"
            },
            {
              "name": "104555",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104555"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-15/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
            },
            {
              "name": "RHSA-2018:2112",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2112"
            },
            {
              "name": "GLSA-201811-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-13"
            },
            {
              "name": "DSA-4235",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4235"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
            },
            {
              "name": "RHSA-2018:2113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2113"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-16/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
            },
            {
              "name": "DSA-4244",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4244"
            },
            {
              "name": "1041193",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041193"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
            },
            {
              "name": "RHSA-2018:2252",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2252"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459693",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459693"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-17/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
            },
            {
              "name": "RHSA-2018:2251",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2251"
            },
            {
              "name": "USN-3705-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3705-1/"
            },
            {
              "name": "USN-3714-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3714-1/"
            },
            {
              "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-12360",
    "datePublished": "2018-10-18T13:00:00",
    "dateReserved": "2018-06-14T00:00:00",
    "dateUpdated": "2024-08-05T08:30:59.673Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-5156

Vulnerability from cvelistv5

Published

2018-10-18 13:00

Modified

2024-08-05 05:26

Severity ?

Summary

A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201810-01	vendor-advisory, x_refsource_GENTOO
	https://www.mozilla.org/security/advisories/mfsa2018-15/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2112	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201811-13	vendor-advisory, x_refsource_GENTOO
	https://bugzilla.mozilla.org/show_bug.cgi?id=1453127	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4235	vendor-advisory, x_refsource_DEBIAN
	https://www.debian.org/security/2018/dsa-4295	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2018:2113	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-16/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/104560	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041193	vdb-entry, x_refsource_SECTRACK
	https://www.mozilla.org/security/advisories/mfsa2018-19/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2018-17/	x_refsource_CONFIRM
	https://usn.ubuntu.com/3705-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:26:46.986Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
          },
          {
            "name": "RHSA-2018:2112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2112"
          },
          {
            "name": "[debian-lts-announce] 20181112 [SECURITY] [DLA 1575-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html"
          },
          {
            "name": "GLSA-201811-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-13"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1453127"
          },
          {
            "name": "DSA-4235",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4235"
          },
          {
            "name": "DSA-4295",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4295"
          },
          {
            "name": "RHSA-2018:2113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
          },
          {
            "name": "104560",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104560"
          },
          {
            "name": "1041193",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041193"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
          },
          {
            "name": "USN-3705-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3705-1/"
          },
          {
            "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "61",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-06-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Media recorder segmentation fault when track type is changed during capture",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-25T10:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "GLSA-201810-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
        },
        {
          "name": "RHSA-2018:2112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        },
        {
          "name": "[debian-lts-announce] 20181112 [SECURITY] [DLA 1575-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html"
        },
        {
          "name": "GLSA-201811-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-13"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1453127"
        },
        {
          "name": "DSA-4235",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4235"
        },
        {
          "name": "DSA-4295",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4295"
        },
        {
          "name": "RHSA-2018:2113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
        },
        {
          "name": "104560",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104560"
        },
        {
          "name": "1041193",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041193"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
        },
        {
          "name": "USN-3705-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3705-1/"
        },
        {
          "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-5156",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "61"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 60, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Media recorder segmentation fault when track type is changed during capture"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-01"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-15/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
            },
            {
              "name": "RHSA-2018:2112",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2112"
            },
            {
              "name": "[debian-lts-announce] 20181112 [SECURITY] [DLA 1575-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html"
            },
            {
              "name": "GLSA-201811-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-13"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1453127",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1453127"
            },
            {
              "name": "DSA-4235",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4235"
            },
            {
              "name": "DSA-4295",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4295"
            },
            {
              "name": "RHSA-2018:2113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2113"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-16/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
            },
            {
              "name": "104560",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104560"
            },
            {
              "name": "1041193",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041193"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-17/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
            },
            {
              "name": "USN-3705-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3705-1/"
            },
            {
              "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-5156",
    "datePublished": "2018-10-18T13:00:00",
    "dateReserved": "2018-01-03T00:00:00",
    "dateUpdated": "2024-08-05T05:26:46.986Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-12366

Vulnerability from cvelistv5

Published

2018-10-18 13:00

Modified

2024-08-05 08:30

Severity ?

Summary

An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201810-01	vendor-advisory, x_refsource_GENTOO
	https://www.mozilla.org/security/advisories/mfsa2018-15/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2112	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201811-13	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2018/dsa-4235	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2018-18/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2113	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-16/	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4244	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/104560	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041193	vdb-entry, x_refsource_SECTRACK
	https://www.mozilla.org/security/advisories/mfsa2018-19/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2252	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-17/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1464039	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2251	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3705-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3714-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:30:59.988Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
          },
          {
            "name": "RHSA-2018:2112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2112"
          },
          {
            "name": "GLSA-201811-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-13"
          },
          {
            "name": "DSA-4235",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4235"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
          },
          {
            "name": "RHSA-2018:2113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
          },
          {
            "name": "DSA-4244",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4244"
          },
          {
            "name": "104560",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104560"
          },
          {
            "name": "1041193",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041193"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
          },
          {
            "name": "RHSA-2018:2252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2252"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1464039"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
          },
          {
            "name": "RHSA-2018:2251",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2251"
          },
          {
            "name": "USN-3705-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3705-1/"
          },
          {
            "name": "USN-3714-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3714-1/"
          },
          {
            "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "61",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-06-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Invalid data handling during QCMS transformations",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-25T10:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "GLSA-201810-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
        },
        {
          "name": "RHSA-2018:2112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        },
        {
          "name": "GLSA-201811-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-13"
        },
        {
          "name": "DSA-4235",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4235"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
        },
        {
          "name": "RHSA-2018:2113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
        },
        {
          "name": "DSA-4244",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4244"
        },
        {
          "name": "104560",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104560"
        },
        {
          "name": "1041193",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041193"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
        },
        {
          "name": "RHSA-2018:2252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2252"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1464039"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
        },
        {
          "name": "RHSA-2018:2251",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2251"
        },
        {
          "name": "USN-3705-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3705-1/"
        },
        {
          "name": "USN-3714-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3714-1/"
        },
        {
          "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-12366",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "61"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Invalid data handling during QCMS transformations"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-01"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-15/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
            },
            {
              "name": "RHSA-2018:2112",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2112"
            },
            {
              "name": "GLSA-201811-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-13"
            },
            {
              "name": "DSA-4235",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4235"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
            },
            {
              "name": "RHSA-2018:2113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2113"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-16/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
            },
            {
              "name": "DSA-4244",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4244"
            },
            {
              "name": "104560",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104560"
            },
            {
              "name": "1041193",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041193"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
            },
            {
              "name": "RHSA-2018:2252",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2252"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-17/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1464039",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1464039"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
            },
            {
              "name": "RHSA-2018:2251",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2251"
            },
            {
              "name": "USN-3705-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3705-1/"
            },
            {
              "name": "USN-3714-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3714-1/"
            },
            {
              "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-12366",
    "datePublished": "2018-10-18T13:00:00",
    "dateReserved": "2018-06-14T00:00:00",
    "dateUpdated": "2024-08-05T08:30:59.988Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2018-12365

Vulnerability from cvelistv5

Published

2018-10-18 13:00

Modified

2024-08-05 08:30

Severity ?

Summary

A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.

References

▼	URL	Tags
	https://security.gentoo.org/glsa/201810-01	vendor-advisory, x_refsource_GENTOO
	https://www.mozilla.org/security/advisories/mfsa2018-15/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2112	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201811-13	vendor-advisory, x_refsource_GENTOO
	https://www.debian.org/security/2018/dsa-4235	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2018-18/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1459206	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2113	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-16/	x_refsource_CONFIRM
	https://www.debian.org/security/2018/dsa-4244	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/104560	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1041193	vdb-entry, x_refsource_SECTRACK
	https://www.mozilla.org/security/advisories/mfsa2018-19/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:2252	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2018-17/	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2018:2251	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3705-1/	vendor-advisory, x_refsource_UBUNTU
	https://usn.ubuntu.com/3714-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html	mailing-list, x_refsource_MLIST

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T08:30:59.980Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201810-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201810-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
          },
          {
            "name": "RHSA-2018:2112",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2112"
          },
          {
            "name": "GLSA-201811-13",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201811-13"
          },
          {
            "name": "DSA-4235",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4235"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459206"
          },
          {
            "name": "RHSA-2018:2113",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2113"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
          },
          {
            "name": "DSA-4244",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4244"
          },
          {
            "name": "104560",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/104560"
          },
          {
            "name": "1041193",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041193"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
          },
          {
            "name": "RHSA-2018:2252",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2252"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
          },
          {
            "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
          },
          {
            "name": "RHSA-2018:2251",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2251"
          },
          {
            "name": "USN-3705-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3705-1/"
          },
          {
            "name": "USN-3714-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3714-1/"
          },
          {
            "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "60.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "61",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-06-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Compromised IPC child process can list local filenames",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-25T10:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "GLSA-201810-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201810-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
        },
        {
          "name": "RHSA-2018:2112",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2112"
        },
        {
          "name": "GLSA-201811-13",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201811-13"
        },
        {
          "name": "DSA-4235",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4235"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459206"
        },
        {
          "name": "RHSA-2018:2113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2113"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
        },
        {
          "name": "DSA-4244",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4244"
        },
        {
          "name": "104560",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/104560"
        },
        {
          "name": "1041193",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041193"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
        },
        {
          "name": "RHSA-2018:2252",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2252"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
        },
        {
          "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
        },
        {
          "name": "RHSA-2018:2251",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2251"
        },
        {
          "name": "USN-3705-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3705-1/"
        },
        {
          "name": "USN-3714-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3714-1/"
        },
        {
          "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-12365",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "60.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.9"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "61"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird \u003c 60, Thunderbird \u003c 52.9, Firefox ESR \u003c 60.1, Firefox ESR \u003c 52.9, and Firefox \u003c 61."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Compromised IPC child process can list local filenames"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201810-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201810-01"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-15/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-15/"
            },
            {
              "name": "RHSA-2018:2112",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2112"
            },
            {
              "name": "GLSA-201811-13",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201811-13"
            },
            {
              "name": "DSA-4235",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4235"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-18/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-18/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459206",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1459206"
            },
            {
              "name": "RHSA-2018:2113",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2113"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-16/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-16/"
            },
            {
              "name": "DSA-4244",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4244"
            },
            {
              "name": "104560",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/104560"
            },
            {
              "name": "1041193",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041193"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-19/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-19/"
            },
            {
              "name": "RHSA-2018:2252",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2252"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-17/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-17/"
            },
            {
              "name": "[debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00013.html"
            },
            {
              "name": "RHSA-2018:2251",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2251"
            },
            {
              "name": "USN-3705-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3705-1/"
            },
            {
              "name": "USN-3714-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3714-1/"
            },
            {
              "name": "[debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-12365",
    "datePublished": "2018-10-18T13:00:00",
    "dateReserved": "2018-06-14T00:00:00",
    "dateUpdated": "2024-08-05T08:30:59.980Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature