CVE-2018-12379: High severity thunderbird vulnerability
When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading to a potentially exploitable crash. This requires running the Mozilla Updater manually on the local system with the malicious MAR file in order to occur.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2018-12379?
CVE-2018-12379 has a moderate severity rating due to its potential for causing a crash.
How do I fix CVE-2018-12379?
To fix CVE-2018-12379, update your Mozilla Firefox or Thunderbird to the specified remedied versions.
Which software is affected by CVE-2018-12379?
CVE-2018-12379 affects Mozilla Firefox, Firefox ESR, and Thunderbird versions prior to their respective fixed releases.
What is the nature of the vulnerability in CVE-2018-12379?
CVE-2018-12379 is an out-of-bounds write vulnerability that can occur when processing a MAR file with a long filename.
Can CVE-2018-12379 be exploited remotely?
No, exploiting CVE-2018-12379 requires local execution of the Mozilla Updater with the malicious MAR file.