Vulnerability CVE-2018-18502


Published: 2019-02-05

Description:
Mozilla developers and community members reported memory safety bugs present in Firefox 64. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 65.

Type:

CWE-119

(Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Mozilla -> Firefox 
Canonical -> Ubuntu linux 

 References:
http://www.securityfocus.com/bid/106773
https://usn.ubuntu.com/3874-1/
https://www.mozilla.org/security/advisories/mfsa2019-01/

Copyright 2024, cxsecurity.com

 

Back to Top