ByteOS Network

CVE Vulnerability Details :

CVE-2018-5127

PUBLISHED

More Info Official Page

Assigner-mozilla

Assigner Org ID-f16b083a-5664-49f3-a51e-8d479e5ed7fe

Published At-11 Jun, 2018 | 21:00

Updated At-05 Aug, 2024 | 05:26

▼CVE Numbering Authority (CNA)

A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.

Affected Products

Vendor

Mozilla Corporation

Product

Thunderbird

Versions

Affected

From unspecified before 52.7 (custom)

Vendor

Mozilla Corporation

Product

Firefox ESR

Versions

Affected

From unspecified before 52.7 (custom)

Vendor

Mozilla Corporation

Product

Firefox

Versions

Affected

From unspecified before 59 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	Buffer overflow manipulating SVG animatedPathSegList

Type: text

CWE ID: N/A

Description: Buffer overflow manipulating SVG animatedPathSegList

References

Hyperlink	Resource
https://www.debian.org/security/2018/dsa-4139	vendor-advisory x_refsource_DEBIAN
https://security.gentoo.org/glsa/201810-01	vendor-advisory x_refsource_GENTOO
http://www.securityfocus.com/bid/103388	vdb-entry x_refsource_BID
https://security.gentoo.org/glsa/201811-13	vendor-advisory x_refsource_GENTOO
https://access.redhat.com/errata/RHSA-2018:0527	vendor-advisory x_refsource_REDHAT
https://usn.ubuntu.com/3545-1/	vendor-advisory x_refsource_UBUNTU
https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html	mailing-list x_refsource_MLIST
https://www.mozilla.org/security/advisories/mfsa2018-09/	x_refsource_CONFIRM
https://www.mozilla.org/security/advisories/mfsa2018-07/	x_refsource_CONFIRM
https://access.redhat.com/errata/RHSA-2018:0526	vendor-advisory x_refsource_REDHAT
https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html	mailing-list x_refsource_MLIST
https://www.debian.org/security/2018/dsa-4155	vendor-advisory x_refsource_DEBIAN
https://access.redhat.com/errata/RHSA-2018:0648	vendor-advisory x_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2018:0647	vendor-advisory x_refsource_REDHAT
https://bugzilla.mozilla.org/show_bug.cgi?id=1430557	x_refsource_CONFIRM
http://www.securitytracker.com/id/1040514	vdb-entry x_refsource_SECTRACK
https://usn.ubuntu.com/3596-1/	vendor-advisory x_refsource_UBUNTU
https://www.mozilla.org/security/advisories/mfsa2018-06/	x_refsource_CONFIRM

Hyperlink: https://www.debian.org/security/2018/dsa-4139

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://security.gentoo.org/glsa/201810-01

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://www.securityfocus.com/bid/103388

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://security.gentoo.org/glsa/201811-13

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: https://access.redhat.com/errata/RHSA-2018:0527

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://usn.ubuntu.com/3545-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2018-09/

Resource:

x_refsource_CONFIRM

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2018-07/

Resource:

x_refsource_CONFIRM

Hyperlink: https://access.redhat.com/errata/RHSA-2018:0526

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://www.debian.org/security/2018/dsa-4155

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://access.redhat.com/errata/RHSA-2018:0648

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://access.redhat.com/errata/RHSA-2018:0647

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=1430557

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1040514

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: https://usn.ubuntu.com/3596-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://www.mozilla.org/security/advisories/mfsa2018-06/

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.debian.org/security/2018/dsa-4139	vendor-advisory x_refsource_DEBIAN x_transferred
https://security.gentoo.org/glsa/201810-01	vendor-advisory x_refsource_GENTOO x_transferred
http://www.securityfocus.com/bid/103388	vdb-entry x_refsource_BID x_transferred
https://security.gentoo.org/glsa/201811-13	vendor-advisory x_refsource_GENTOO x_transferred
https://access.redhat.com/errata/RHSA-2018:0527	vendor-advisory x_refsource_REDHAT x_transferred
https://usn.ubuntu.com/3545-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html	mailing-list x_refsource_MLIST x_transferred
https://www.mozilla.org/security/advisories/mfsa2018-09/	x_refsource_CONFIRM x_transferred
https://www.mozilla.org/security/advisories/mfsa2018-07/	x_refsource_CONFIRM x_transferred
https://access.redhat.com/errata/RHSA-2018:0526	vendor-advisory x_refsource_REDHAT x_transferred
https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html	mailing-list x_refsource_MLIST x_transferred
https://www.debian.org/security/2018/dsa-4155	vendor-advisory x_refsource_DEBIAN x_transferred
https://access.redhat.com/errata/RHSA-2018:0648	vendor-advisory x_refsource_REDHAT x_transferred
https://access.redhat.com/errata/RHSA-2018:0647	vendor-advisory x_refsource_REDHAT x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=1430557	x_refsource_CONFIRM x_transferred
http://www.securitytracker.com/id/1040514	vdb-entry x_refsource_SECTRACK x_transferred
https://usn.ubuntu.com/3596-1/	vendor-advisory x_refsource_UBUNTU x_transferred
https://www.mozilla.org/security/advisories/mfsa2018-06/	x_refsource_CONFIRM x_transferred