CVE-2018-5146
high · 8.8An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.
8.8
CVSS
11.9%
EPSS (exploit prob.)
96th
EPSS percentile
2018-06-11
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-787
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| redhat | enterprise_linux_desktop | 6.0 |
| redhat | enterprise_linux_desktop | 7.0 |
| redhat | enterprise_linux_server | 6.0 |
| redhat | enterprise_linux_server | 7.0 |
| redhat | enterprise_linux_server_aus | 7.4 |
| redhat | enterprise_linux_server_aus | 7.6 |
| redhat | enterprise_linux_server_eus | 7.4 |
| redhat | enterprise_linux_server_eus | 7.5 |
| redhat | enterprise_linux_server_eus | 7.6 |
| redhat | enterprise_linux_server_tus | 7.4 |
| redhat | enterprise_linux_server_tus | 7.6 |
| redhat | enterprise_linux_workstation | 6.0 |
| redhat | enterprise_linux_workstation | 7.0 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 17.10 |
| mozilla | firefox | < 52.7.2 |
| mozilla | firefox | < 59.0.1 |
| mozilla | thunderbird | < 52.7.0 |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/103432
- http://www.securitytracker.com/id/1040544
- https://access.redhat.com/errata/RHSA-2018:0549
- https://access.redhat.com/errata/RHSA-2018:0647
- https://access.redhat.com/errata/RHSA-2018:0648
- https://access.redhat.com/errata/RHSA-2018:0649
- https://access.redhat.com/errata/RHSA-2018:1058
- https://bugzilla.mozilla.org/show_bug.cgi?id=1446062
- https://lists.debian.org/debian-lts-announce/2018/03/msg00022.html
- https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html
- https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html
- https://security.gentoo.org/glsa/201811-13
- https://usn.ubuntu.com/3545-1/
- https://usn.ubuntu.com/3599-1/
- https://usn.ubuntu.com/3604-1/
- https://www.debian.org/security/2018/dsa-4140
- https://www.debian.org/security/2018/dsa-4143
- https://www.debian.org/security/2018/dsa-4155
- https://www.mozilla.org/security/advisories/mfsa2018-08/
- https://www.mozilla.org/security/advisories/mfsa2018-09/
- http://www.securityfocus.com/bid/103432
- http://www.securitytracker.com/id/1040544
- https://access.redhat.com/errata/RHSA-2018:0549
- https://access.redhat.com/errata/RHSA-2018:0647
- https://access.redhat.com/errata/RHSA-2018:0648
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-5146