7
CVSSv3

CVE-2018-12385

Published: 18/10/2018 Updated: 06/12/2018
CVSS v2 Base Score: 4.4 | Impact Score: 6.4 | Exploitability Score: 3.4
CVSS v3 Base Score: 7 | Impact Score: 5.9 | Exploitability Score: 1
VMScore: 392
Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an malicious user to write data into the local cache or from locally installed malware. This issue also triggers a non-exploitable startup crash for users switching between the Nightly and Release versions of Firefox if the same profile is used. This vulnerability affects Thunderbird < 60.2.1, Firefox ESR < 60.2.1, and Firefox < 62.0.2.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

redhat enterprise linux server eus 7.6

redhat enterprise linux workstation 6.0

redhat enterprise linux desktop 7.0

redhat enterprise linux server 6.0

redhat enterprise linux server 7.0

redhat enterprise linux server aus 7.6

redhat enterprise linux workstation 7.0

redhat enterprise linux desktop 6.0

redhat enterprise linux server eus 7.5

redhat enterprise linux server tus 7.6

debian debian linux 8.0

debian debian linux 9.0

canonical ubuntu linux 16.04

canonical ubuntu linux 14.04

canonical ubuntu linux 18.04

mozilla firefox

mozilla firefox esr

mozilla thunderbird

Vendor Advisories

Two security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code and local information disclosure For the stable distribution (stretch), these problems have been fixed in version 6021esr-1~deb9u1 We recommend that you upgrade your firefox-esr packages For the detailed sec ...
Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Topic An update for thunderbird is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) bas ...
Synopsis Moderate: firefox security update Type/Severity Security Advisory: Moderate Topic An update for firefox is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, wh ...
Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Topic An update for thunderbird is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) bas ...
Synopsis Moderate: firefox security update Type/Severity Security Advisory: Moderate Topic An update for firefox is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, wh ...
Several security issues were fixed in Thunderbird ...
Firefox could be made to crash or run programs as your login if it opened a malicious website ...
A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache or from locally installed malware This issue also triggers a non-exp ...
A security issue has been found in Thunderbird versions prior to 6021 A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local ca ...
Mozilla Foundation Security Advisory 2018-22 Security vulnerabilities fixed in Firefox 6202 Announced September 21, 2018 Impact moderate Products Firefox Fixed in Firefox 6202 ...
Mozilla Foundation Security Advisory 2018-23 Security vulnerabilities fixed in Firefox ESR 6021 Announced September 21, 2018 Impact moderate Products Firefox ESR Fixed in Firefox ESR 6021 ...
Mozilla Foundation Security Advisory 2018-25 Security vulnerabilities fixed in Thunderbird 6021 Announced October 4, 2018 Impact critical Products Thunderbird Fixed in Thunderbird 6021 ...