Vulnetix
Try Vulnetix Request Demo
CVE-2018-12386 PUBLISHED

A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.

EPSS 39.10% · 97.2th percentile

Risk Scores

EPSS Score
39.10%
97.2th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSmozjs5252.8.1-0ubuntu0.18.04.1, 0, 52.3.1-0ubuntu3
Ubuntu:14.04:LTSthunderbird1:24.0+build1-0ubuntu1, 1:38.8.0+build1-0ubuntu0.14.04.1, 1:38.7.2+build1-0ubuntu0.14.04.1
Ubuntu:16.04:LTSthunderbird0, 1:38.6.0+build1-0ubuntu1, 1:38.5.1+build2-0ubuntu1
Ubuntu:20.04:LTSmozjs5252.9.1-1build1, 52.9.1-1ubuntu3, 0
Ubuntu:18.04:LTSfirefox59.0.1+build1-0ubuntu1, 0, 56.0+build6-0ubuntu1
Ubuntu:14.04:LTSfirefox43.0.4+build3-0ubuntu0.14.04.1, 58.0.1+build1-0ubuntu0.14.04.1, 58.0+build6-0ubuntu0.14.04.1
Ubuntu:18.04:LTSmozjs380, 38.8.0~repack1-0ubuntu1, 38.8.0~repack1-0ubuntu3
Ubuntu:18.04:LTSthunderbird1:52.4.0+build1-0ubuntu2, 1:52.8.0+build1-0ubuntu0.18.04.1, 1:52.7.0+build1-0ubuntu1
Ubuntu:16.04:LTSfirefox44.0+build3-0ubuntu2, 44.0.1+build1-0ubuntu1, 44.0.2+build1-0ubuntu1

Timeline

References

Open in Interactive Console →