CVE-2018-5183

Description

Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.

References

https://www.mozilla.org/security/advisories/mfsa2018-13/

https://www.mozilla.org/security/advisories/mfsa2018-12/

https://www.debian.org/security/2018/dsa-4209

https://www.debian.org/security/2018/dsa-4199

https://usn.ubuntu.com/3660-1/

https://security.gentoo.org/glsa/201811-13

https://security.gentoo.org/glsa/201810-01

https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html

https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html

https://bugzilla.mozilla.org/show_bug.cgi?id=1454692

https://access.redhat.com/errata/RHSA-2018:1726

https://access.redhat.com/errata/RHSA-2018:1725

https://access.redhat.com/errata/RHSA-2018:1415

https://access.redhat.com/errata/RHSA-2018:1414

http://www.securitytracker.com/id/1040898

http://www.securityfocus.com/bid/104138

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3