CVE-2018-12359: Buffer Overflow
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the <canvas> element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12359
Other sources
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the <canvas> element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash.
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 60 - Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 52.9 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 61 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 52.9 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 60.1 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 138.0.1-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 115.14.0esr-1~deb11u1Fixed in 128.9.0esr-1~deb11u1Fixed in 128.8.0esr-1~deb12u1Fixed in 128.10.0esr-1~deb12u1Fixed in 128.9.0esr-2Fixed in 128.10.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.12.0-1~deb11u1Fixed in 1:128.10.0esr-1~deb11u1Fixed in 1:128.8.0esr-1~deb12u1Fixed in 1:128.10.0esr-1~deb12u1Fixed in 1:128.9.0esr-1Fixed in 1:128.10.0esr-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 60 - Upgrade
Upgrade
Mozilla Thunderbird / Firefox ESRto a version that resolves this vulnerability.Fixed in 60.1 - Upgrade
Upgrade
Mozilla Thunderbird / Firefox ESRto a version that resolves this vulnerability.Fixed in 52.9 - Upgrade
Upgrade
Mozilla Thunderbird / Firefox ESRto a version that resolves this vulnerability.Fixed in 61
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2018-12359?
CVE-2018-12359 is rated as a moderate severity vulnerability.
How do I fix CVE-2018-12359?
To remediate CVE-2018-12359, update to the latest versions of affected software such as Mozilla Thunderbird 60.1 or newer, and Firefox ESR 60.1 or newer.
What damage can CVE-2018-12359 cause?
CVE-2018-12359 can lead to a potentially exploitable crash through a buffer overflow when dynamically resizing a canvas element.
Which software versions are affected by CVE-2018-12359?
CVE-2018-12359 affects Mozilla Thunderbird versions prior to 60, Firefox ESR versions prior to 60.1, and Firefox versions prior to 61.
Is there a known exploit for CVE-2018-12359?
While no specific exploit has been widely reported, CVE-2018-12359 presents vulnerabilities that could potentially be exploited.