CVE-2018-5159
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes.
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 21.0%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially exploitable crash triggerable by web content. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.
- CVSS 3.0
- 9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 21.04% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-190, CWE-787
- Affected
- debian/debian linux · redhat/enterprise linux desktop · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server eus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · mozilla/firefox · mozilla/thunderbird · mozilla/thunderbird esr · canonical/ubuntu linux
- Source
- security@mozilla.org
References
- http://www.securityfocus.com/bid/104136Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040896Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1414Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1415Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1725Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1726Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1441941Issue Tracking, Permissions Required, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/05/msg00007.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/05/msg00013.htmlMailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201810-01Third Party Advisory
- https://security.gentoo.org/glsa/201811-13Third Party Advisory
- https://usn.ubuntu.com/3645-1/Third Party Advisory
- https://usn.ubuntu.com/3660-1/Third Party Advisory
- https://www.debian.org/security/2018/dsa-4199Third Party Advisory
- https://www.debian.org/security/2018/dsa-4209Third Party Advisory
- https://www.exploit-db.com/exploits/44759/Exploit, Third Party Advisory, VDB Entry
- https://www.mozilla.org/security/advisories/mfsa2018-11/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2018-12/Vendor Advisory
- https://www.mozilla.org/security/advisories/mfsa2018-13/Vendor Advisory
- http://www.securityfocus.com/bid/104136Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040896Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:1414Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1415Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1725Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:1726Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1441941Issue Tracking, Permissions Required, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/05/msg00007.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/05/msg00013.htmlMailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201810-01Third Party Advisory
- https://security.gentoo.org/glsa/201811-13Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.