CVE-2018-5102: Use After Free
A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 52.6 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 58 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 52.6 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 147.0.4-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 115.14.0esr-1~deb11u1Fixed in 140.7.0esr-1~deb11u1Fixed in 128.14.0esr-1~deb12u1Fixed in 140.7.0esr-1~deb12u1Fixed in 140.4.0esr-1~deb13u1Fixed in 140.7.0esr-1~deb13u1Fixed in 140.7.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.12.0-1~deb11u1Fixed in 1:140.7.1esr-1~deb11u1Fixed in 1:140.6.0esr-1~deb12u1Fixed in 1:140.7.1esr-1~deb12u1Fixed in 1:140.6.0esr-1~deb13u1Fixed in 1:140.7.1esr-1~deb13u1Fixed in 1:140.7.1esr-1 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 52.6.0-r0
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2018-5095
- CVE-2018-5096
- CVE-2018-5097
- CVE-2018-5098
- CVE-2018-5099
- CVE-2018-5102
- CVE-2018-5103
- CVE-2018-5104
- CVE-2018-5117
- CVE-2018-5089
- CVE-2018-5091
- CVE-2018-5092
- CVE-2018-5093
- CVE-2018-5094
- CVE-2018-5100
- CVE-2018-5101
- CVE-2018-5105
- CVE-2018-5106
- CVE-2018-5107
- CVE-2018-5108
- CVE-2018-5109
- CVE-2018-5110
- CVE-2018-5111
- CVE-2018-5112
- CVE-2018-5113
- CVE-2018-5114
- CVE-2018-5115
- CVE-2018-5116
- CVE-2018-5118
- CVE-2018-5119
- CVE-2018-5121
- CVE-2018-5122
- CVE-2018-5090
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2018-5102.
Which software versions are affected by this vulnerability?
This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.
What is the severity rating of CVE-2018-5102?
The severity rating of CVE-2018-5102 is critical with a score of 9.8.
Is there a fix available for this vulnerability?
Yes, the vulnerability can be fixed by updating to Firefox version 58.0 or higher, Thunderbird version 52.6.0 or higher, or the latest version of Ubuntu's firefox package.
Where can I find more information about CVE-2018-5102?
You can find more information about CVE-2018-5102 in the following references: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1419363), [Mozilla Security Advisory](https://www.mozilla.org/en-US/security/advisories/mfsa2018-02/), [Mozilla Security Advisories](https://www.mozilla.org/security/advisories/mfsa2018-02/)