CVE-2018-5145
Critical
CVE-2018-5145
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.
Exploit probability
3.0%
Published
June 11, 2018
Required by
Not available
Last source change
April 16, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2018-5145
View original source
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.
05 / REFERENCES
Further evidence
- http://www.securityfocus.com/bid/103384
- http://www.securitytracker.com/id/1040514
- https://access.redhat.com/errata/RHSA-2018:0526
- https://access.redhat.com/errata/RHSA-2018:0527
- https://access.redhat.com/errata/RHSA-2018:0647
- https://access.redhat.com/errata/RHSA-2018:0648
- https://bugzilla.mozilla.org/buglist.cgi?bug_id=1261175%2C1348955
- https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html
- https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html
- https://security.gentoo.org/glsa/201811-13
- https://usn.ubuntu.com/3545-1/
- https://www.debian.org/security/2018/dsa-4139
- https://www.debian.org/security/2018/dsa-4155
- https://www.mozilla.org/security/advisories/mfsa2018-07/
- https://www.mozilla.org/security/advisories/mfsa2018-09/