2 lines
11 KiB
JSON
2 lines
11 KiB
JSON
{"affected":[{"affectedData":[{"product":"Thunderbird","vendor":"Mozilla","versions":[{"lessThan":"52.8","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Thunderbird ESR","vendor":"Mozilla","versions":[{"lessThan":"52.8","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Firefox","vendor":"Mozilla","versions":[{"lessThan":"60","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Firefox ESR","vendor":"Mozilla","versions":[{"lessThan":"52.8","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security@mozilla.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*","matchCriteriaId":"16F59A04-14CF-49E2-9973-645477EA09DA","vulnerable":true},{"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43","vulnerable":true},{"criteria":"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*","matchCriteriaId":"DEECE5FC-CACF-4496-A3E7-164736409252","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*","matchCriteriaId":"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*","matchCriteriaId":"33C068A4-3780-4EAB-A937-6082DF847564","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*","matchCriteriaId":"9BBCD86A-E6C7-4444-9D74-F861084090F0","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*","matchCriteriaId":"51EF4996-72F4-4FA4-814F-F5991E7A8318","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B353CE99-D57C-465B-AAB0-73EF581127D1","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*","matchCriteriaId":"A4E9DD8A-A68B-4A69-8B01-BFF92A2020A8","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"BF77CDCF-B9C9-427D-B2BF-36650FB2148C","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*","matchCriteriaId":"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E5ED5807-55B7-47C5-97A6-03233F4FBC3A","vulnerable":true},{"criteria":"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*","matchCriteriaId":"825ECE2D-E232-46E0-A047-074B34DB1E97","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"7D3CA9AE-459C-4375-91EB-CD724368798D","versionEndExcluding":"52.8.0","vulnerable":true},{"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"1AD89C37-DC57-40D3-80CE-5126A6C142E8","versionEndExcluding":"60.0","vulnerable":true},{"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"6216B631-0AF7-4438-8575-F23342715F8F","versionEndExcluding":"52.8.0","vulnerable":true},{"criteria":"cpe:2.3:a:mozilla:thunderbird_esr:*:*:*:*:*:*:*:*","matchCriteriaId":"5B2A31F2-59B8-4342-B81D-E85DF72EE51A","versionEndExcluding":"52.8.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*","matchCriteriaId":"B5A6F2F3-4894-4392-8296-3B8DD2679084","vulnerable":true},{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*","matchCriteriaId":"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B","vulnerable":true},{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*","matchCriteriaId":"9070C9D8-A14A-467F-8253-33B966C16886","vulnerable":true},{"criteria":"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*","matchCriteriaId":"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8."},{"lang":"es","value":"Se han informado de errores de seguridad de memoria en Firefox 55, Firefox ESR 52.7 y Thunderbird 52.7. Algunos de estos errores mostraron evidencias de corrupción de memoria y se cree que, con el esfuerzo necesario, se podrían explotar para ejecutar código arbitrario. Esta vulnerabilidad afecta a las versiones anteriores a la 52.8 de Thunderbird, las versiones anteriores a la 52.8 de Thunderbird ESR, las versiones anteriores a la 60 de Firefox y las versiones anteriores a la 52.8 de Firefox ESR."}],"id":"CVE-2018-5150","lastModified":"2026-06-17T01:59:43.013","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2018-06-11T21:29:14.920","references":[{"source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/104136"},{"source":"security@mozilla.org","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040896"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1414"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1415"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1725"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1726"},{"source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required","Third Party Advisory"],"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=1388020%2C1433609%2C1409440%2C1448705%2C1451376%2C1452202%2C1444668%2C1393367%2C1411415%2C1426129"},{"source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html"},{"source":"security@mozilla.org","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/201810-01"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/201811-13"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3645-1/"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3660-1/"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3688-1/"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2018/dsa-4199"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2018/dsa-4209"},{"source":"security@mozilla.org","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2018-11/"},{"source":"security@mozilla.org","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2018-12/"},{"source":"security@mozilla.org","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2018-13/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/104136"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securitytracker.com/id/1040896"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1414"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1415"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1725"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2018:1726"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required","Third Party Advisory"],"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=1388020%2C1433609%2C1409440%2C1448705%2C1451376%2C1452202%2C1444668%2C1393367%2C1411415%2C1426129"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/201810-01"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/201811-13"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3645-1/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3660-1/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://usn.ubuntu.com/3688-1/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2018/dsa-4199"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2018/dsa-4209"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2018-11/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2018-12/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2018-13/"}],"sourceIdentifier":"security@mozilla.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-119"}],"source":"nvd@nist.gov","type":"Primary"}]}
|