Vulnerability Details : CVE-2018-5127

A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.

Vulnerability category: Overflow

Published 2018-06-11 21:29:14

Updated 2019-03-08 14:22:35

Source Mozilla Corporation

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2018-5127

Probability of exploitation activity in the next 30 days: 0.66%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 77 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2018-5127

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	nvd@nist.gov
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	nvd@nist.gov
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-5127

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-5127

https://usn.ubuntu.com/3596-1/

USN-3596-1: Firefox vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html

[SECURITY] [DLA 1327-1] thunderbird security update
Third Party Advisory

CVEs referencing this url
http://www.securitytracker.com/id/1040514

Mozilla Firefox Multiple Bugs Let Remote Users Spoof URLs, Bypass Security Restrictions, Deny Service, Obtain Potentially Sensitive Information, and Execute Arbitrary Code - SecurityTracker
Third Party Advisory;VDB Entry

CVEs referencing this url
https://security.gentoo.org/glsa/201811-13

Mozilla Thunderbird: Multiple vulnerabilities (GLSA 201811-13) — Gentoo security
Third Party Advisory

CVEs referencing this url
https://www.mozilla.org/security/advisories/mfsa2018-06/

Security vulnerabilities fixed in Firefox 59 — Mozilla
Vendor Advisory

CVEs referencing this url
https://usn.ubuntu.com/3545-1/

USN-3545-1: Thunderbird vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html

[SECURITY] [DLA 1308-1] firefox-esr security update
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2018:0526

RHSA-2018:0526 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2018:0647

RHSA-2018:0647 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://bugzilla.mozilla.org/show_bug.cgi?id=1430557

1430557 - (CVE-2018-5127) heap-buffer-overflow in DOMSVGPathSegCurvetoCubicAbs
Issue Tracking;Permissions Required
https://access.redhat.com/errata/RHSA-2018:0527

RHSA-2018:0527 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://www.mozilla.org/security/advisories/mfsa2018-09/

Security vulnerabilities fixed in Thunderbird 52.7 — Mozilla
Vendor Advisory

CVEs referencing this url
https://security.gentoo.org/glsa/201810-01

Mozilla Firefox: Multiple vulnerabilities (GLSA 201810-01) — Gentoo security
Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/103388

Mozilla Firefox and Firefox ESR Multiple Security Vulnerabilities
Third Party Advisory;VDB Entry

CVEs referencing this url
https://www.mozilla.org/security/advisories/mfsa2018-07/

Security vulnerabilities fixed in Firefox ESR 52.7 — Mozilla
Vendor Advisory

CVEs referencing this url
https://www.debian.org/security/2018/dsa-4139

Debian -- Security Information -- DSA-4139-1 firefox-esr
Third Party Advisory

CVEs referencing this url
https://access.redhat.com/errata/RHSA-2018:0648

RHSA-2018:0648 - Security Advisory - Red Hat Customer Portal
Third Party Advisory

CVEs referencing this url
https://www.debian.org/security/2018/dsa-4155

Debian -- Security Information -- DSA-4155-1 thunderbird
Third Party Advisory

CVEs referencing this url

Products affected by CVE-2018-5127

Debian » Debian Linux » Version: 7.0
cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Desktop » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Desktop » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Workstation » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Workstation » Version: 7.0
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Aus » Version: 7.4
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Eus » Version: 7.4
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server Eus » Version: 7.5
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
Matching versions
Mozilla » Firefox
Versions before (<) 59.0
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
Matching versions
Mozilla » Thunderbird
Versions before (<) 52.7.0
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
Matching versions
Mozilla » Firefox Esr
Versions before (<) 52.7.0
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 14.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 16.04 LTS Edition
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
Matching versions
Canonical » Ubuntu Linux » Version: 17.10
cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
Matching versions