CVE-2018-12381

Reference Links

• http://www.securityfocus.com/bid/105280
• http://www.securitytracker.com/id/1041610
• https://bugzilla.mozilla.org/show_bug.cgi?id=1435319
• https://security.gentoo.org/glsa/201810-01
• https://www.mozilla.org/security/advisories/mfsa2018-20/
• https://www.mozilla.org/security/advisories/mfsa2018-21/
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-20/
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-21/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2018-20
• MFSA2018-21

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2018-12377
• CVE-2018-12378
• CVE-2018-18499
• CVE-2018-12379
• CVE-2017-16541
• CVE-2018-12381
• CVE-2018-12382
• CVE-2018-12383
• CVE-2018-12375
• CVE-2018-12376

Frequently Asked Questions

• What is the severity of CVE-2018-12381?

  CVE-2018-12381 has a moderate severity level due to its potential to trigger unintentional page navigation.

• How do I fix CVE-2018-12381?

  To fix CVE-2018-12381, update Firefox to version 62 or later and Firefox ESR to version 60.2 or later.

• Which versions of Firefox are affected by CVE-2018-12381?

  CVE-2018-12381 affects Firefox versions prior to 62 and Firefox ESR versions prior to 60.2 on Windows operating systems.

• Is CVE-2018-12381 a cross-platform vulnerability?

  No, CVE-2018-12381 only affects Windows operating systems with Outlook installed.

• What happens if I drag and drop an email into the browser with CVE-2018-12381?

  Dragging and dropping an affected Outlook email into the browser may incorrectly interpret the email's columns as a URL, causing unintended navigation.