CVE-2018-18502: Buffer Overflow

Reference Links

• https://www.mozilla.org/security/advisories/mfsa2019-01/
• https://usn.ubuntu.com/3874-1/
• http://www.securityfocus.com/bid/106773
• https://launchpad.net/bugs/cve/CVE-2018-18502
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1499426%2C1480090%2C1472990%2C1514762%2C1501482%2C1505887%2C1508102%2C1508618%2C1511580%2C1493497%2C1510145%2C1516289%2C1506798%2C1512758
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-01/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-01/#CVE-2018-18500
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-01/#CVE-2018-18502
• https://security-tracker.debian.org/tracker/CVE-2018-18502
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18502
• https://nvd.nist.gov/vuln/detail/CVE-2018-18502
• https://ubuntu.com/security/CVE-2018-18502

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2019-01

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2018-18500
• CVE-2018-18504
• CVE-2018-18505
• CVE-2018-18503
• CVE-2018-18506
• CVE-2018-18502
• CVE-2018-18501

Frequently Asked Questions

• What is CVE-2018-18502?

  CVE-2018-18502 is a memory safety bug present in Firefox 64 that allows attackers to execute arbitrary code.

• How severe is CVE-2018-18502?

  CVE-2018-18502 has a severity rating of critical with a score of 9 out of 10.

• Which software versions are affected by CVE-2018-18502?

  CVE-2018-18502 affects Firefox versions up to but not including 65.0.

• How can I fix CVE-2018-18502?

  To fix CVE-2018-18502, update your Firefox browser to version 65.0 or higher.

• Where can I find more information about CVE-2018-18502?

  You can find more information about CVE-2018-18502 at the following references: [Bugzilla](https://bugzilla.mozilla.org/buglist.cgi?bug_id=1499426%2C1480090%2C1472990%2C1514762%2C1501482%2C1505887%2C1508102%2C1508618%2C1511580%2C1493497%2C1510145%2C1516289%2C1506798%2C1512758), [Mozilla Security Advisories](https://www.mozilla.org/security/advisories/mfsa2019-01/)