CVE-2018-12361

EUVD-2018-4335 · Published Oct 18, 2018

An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, and Firefox < 61.

Technologies

Mozilla FirefoxMozilla Firefox EsrCanonical Ubuntu LinuxDebian Debian LinuxMozilla Thunderbird

Weaknesses

CWE-190

CVSS scores

v3.08.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
v2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

http://www.securityfocus.com/bid/104558
http://www.securitytracker.com/id/1041193
https://bugzilla.mozilla.org/show_bug.cgi?id=1463244
https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html
https://security.gentoo.org/glsa/201810-01
https://security.gentoo.org/glsa/201811-13

Potentially impacted assets

See if this affects your attack surface