Mozilla: Integer overflow during Unicode conversion while loading JavaScript
Published Feb 28, 2019
7.5
HIGHCVSS 3.0
EPSS 3.92%
Description
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an internal UTF-16 representation could result in allocating a buffer too small for the conversion. This leads to a possible out-of-bounds write. *Note: 64-bit builds are not vulnerable to this issue.*. This vulnerability affects Firefox < 63, Firefox ESR < 60.3, and Thunderbird < 60.3.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<63
- Version
-
- Version unspecifiedStatusaffectedConstraints<60.3
- Version
-
- Version unspecifiedStatusaffectedConstraints<60.3
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Mozilla | Firefox | n/a |
| ||||||
| Mozilla | Firefox ESR | n/a |
| ||||||
| Mozilla | Thunderbird | n/a |
|
Configuration 1
- < 63.0
- < 60.3
- < 60.3
Configuration 2
- 8.0
- 9.0
Configuration 3
- 14.04
- 16.04
- 18.04
- 18.10
Configuration 4
- 6.0
- 7.0
- 6.0
- 7.0
- 7.6
- 7.6
- 7.6
- 6.0
- 7.0
No data.
Red Hat Enterprise Linux 6
firefox-0:60.3.0-1.el6
Fixed · RHSA-2018:3006
Red Hat Enterprise Linux 6
thunderbird-0:60.3.0-1.el6
Fixed · RHSA-2018:3531
Red Hat Enterprise Linux 7
firefox-0:60.3.0-1.el7_5
Fixed · RHSA-2018:3005
Red Hat Enterprise Linux 7
thunderbird-0:60.3.0-1.el7_5
Fixed · RHSA-2018:3532
Red Hat Enterprise Linux 8
firefox
Not affected
Red Hat Enterprise Linux 8
thunderbird
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 6 | firefox-0:60.3.0-1.el6 | Fixed | RHSA-2018:3006 |
| Red Hat Enterprise Linux 6 | thunderbird-0:60.3.0-1.el6 | Fixed | RHSA-2018:3531 |
| Red Hat Enterprise Linux 7 | firefox-0:60.3.0-1.el7_5 | Fixed | RHSA-2018:3005 |
| Red Hat Enterprise Linux 7 | thunderbird-0:60.3.0-1.el7_5 | Fixed | RHSA-2018:3532 |
| Red Hat Enterprise Linux 8 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 8 | thunderbird | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (25)
- http://www.securityfocus.com/bid/105718 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/105769 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1041944 vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:3005 vendor-advisoryx_refsource_REDHATThird Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3006 vendor-advisoryx_refsource_REDHATThird Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3531 vendor-advisoryx_refsource_REDHATThird Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3532 vendor-advisoryx_refsource_REDHATThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2018-12393 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1495011 x_refsource_CONFIRMIssue TrackingPermissions RequiredVendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1642183 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-4367 Advisory
- https://lists.debian.org/debian-lts-announce/2018/11/msg00008.html mailing-listx_refsource_MLISTThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html mailing-listx_refsource_MLISTThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2018-12393
- https://security.gentoo.org/glsa/201811-04 vendor-advisoryx_refsource_GENTOOThird Party Advisory
- https://security.gentoo.org/glsa/201811-13 vendor-advisoryx_refsource_GENTOOThird Party Advisory
- https://usn.ubuntu.com/3801-1/ vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- https://usn.ubuntu.com/3868-1/ vendor-advisoryx_refsource_UBUNTUThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2018-12393
- https://www.debian.org/security/2018/dsa-4324 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- https://www.debian.org/security/2018/dsa-4337 vendor-advisoryx_refsource_DEBIANThird Party Advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2018-27/#CVE-2018-12393
- https://www.mozilla.org/security/advisories/mfsa2018-26/ x_refsource_CONFIRMVendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2018-27/ x_refsource_CONFIRMVendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2018-28/ x_refsource_CONFIRMVendor Advisory
Change history (0)
No recorded changes yet.