CVE-2018-5177 PUBLISHED

A vulnerability exists in XSLT during number formatting where a negative buffer size may be allocated in some instances, leading to a buffer overflow and crash if it occurs. This vulnerability affects Firefox < 60.

EPSS 0.30% · 53.4th percentile

Risk Scores

EPSS Score
0.30%
53.4th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSfirefox59.0.2+build1-0ubuntu1, 59.0.1+build1-0ubuntu1, 57.0.1+build2-0ubuntu1
Ubuntu:14.04:LTSfirefox28.0+build2-0ubuntu1, 28.0+build2-0ubuntu2, 29.0+build1-0ubuntu0.14.04.2
Ubuntu:16.04:LTSfirefox44.0.2+build1-0ubuntu1, 45.0+build2-0ubuntu1, 45.0.1+build1-0ubuntu1

Timeline

References

Open in Interactive Console →