CVE-2018-5104: Use After Free

Q: What is CVE-2018-5104?

CVE-2018-5104 is a use-after-free vulnerability that can occur during font face manipulation in Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

Q: Which software versions are affected by CVE-2018-5104?

CVE-2018-5104 affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

Q: What is the severity of CVE-2018-5104?

CVE-2018-5104 has a severity rating of 9.8 (critical).

Q: How can I fix CVE-2018-5104?

To fix CVE-2018-5104, update Thunderbird to version 52.6 or later, Firefox ESR to version 52.6 or later, or Firefox to version 58 or later.

Q: Where can I find more information about CVE-2018-5104?

You can find more information about CVE-2018-5104 at the following references: [Mozilla Advisory](https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5104), [Red Hat Security Advisory 2018:0122](https://access.redhat.com/errata/RHSA-2018:0122), [Red Hat Security Advisory 2018:0262](https://access.redhat.com/errata/RHSA-2018:0262).

Published Jan 23, 2018

Updated

A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash.

Affected Software

42 affected componentsFixes available

Mozilla Thunderbird<52.6

52.6

Mozilla Firefox<58

Mozilla Firefox ESR<52.6

52.6

Debian Debian Linux=7.0

Debian Debian Linux=8.0

Debian Debian Linux=9.0

redhat Enterprise Linux Desktop=6.0

redhat Enterprise Linux Desktop=7.0

redhat Enterprise Linux Server=6.0

redhat Enterprise Linux Server=7.0

redhat Enterprise Linux Server Aus=7.4

redhat Enterprise Linux Server Eus=7.4

redhat Enterprise Linux Server Eus=7.5

redhat Enterprise Linux Workstation=6.0

redhat Enterprise Linux Workstation=7.0

Mozilla Firefox<58.0

Mozilla Firefox ESR<52.6.0

Mozilla Thunderbird<52.6.0

Canonical Ubuntu Linux=14.04

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=17.10

Mozilla Firefox<52.6.0

debian/firefox

147.0.4-1

debian/firefox-esr

115.14.0esr-1~deb11u1140.7.0esr-1~deb11u1128.14.0esr-1~deb12u1140.7.0esr-1~deb12u1140.4.0esr-1~deb13u1140.7.0esr-1~deb13u1140.7.0esr-1

debian/thunderbird

1:115.12.0-1~deb11u11:140.7.1esr-1~deb11u11:140.6.0esr-1~deb12u11:140.7.1esr-1~deb12u11:140.6.0esr-1~deb13u11:140.7.1esr-1~deb13u11:140.7.1esr-1

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

alpine/firefox-esr<52.6.0-r0

52.6.0-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Thunderbird to a version that resolves this vulnerability.
Fixed in 52.6
Upgrade
Upgrade Firefox to a version that resolves this vulnerability.
Fixed in 58
Upgrade
Upgrade Firefox ESR to a version that resolves this vulnerability.
Fixed in 52.6
Upgrade
Upgrade debian/firefox to a version that resolves this vulnerability.
Fixed in 147.0.4-1
Upgrade
Upgrade debian/firefox-esr to a version that resolves this vulnerability.
Fixed in 115.14.0esr-1~deb11u1Fixed in 140.7.0esr-1~deb11u1Fixed in 128.14.0esr-1~deb12u1Fixed in 140.7.0esr-1~deb12u1Fixed in 140.4.0esr-1~deb13u1Fixed in 140.7.0esr-1~deb13u1Fixed in 140.7.0esr-1
Upgrade
Upgrade debian/thunderbird to a version that resolves this vulnerability.
Fixed in 1:115.12.0-1~deb11u1Fixed in 1:140.7.1esr-1~deb11u1Fixed in 1:140.6.0esr-1~deb12u1Fixed in 1:140.7.1esr-1~deb12u1Fixed in 1:140.6.0esr-1~deb13u1Fixed in 1:140.7.1esr-1~deb13u1Fixed in 1:140.7.1esr-1
Upgrade
Upgrade alpine/firefox-esr to a version that resolves this vulnerability.
Fixed in 52.6.0-r0

Event History

Jan 23, 2018

CVE Published

12:00 AM

Data Sourced

via Red Hat·11:19 PM

DescriptionSeverityAffected Software

Jun 11, 2018

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Data Sourced

via NVD·09:29 PM

DescriptionSeverityWeaknessAffected Software

Data Sourced

via OSV·09:29 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is CVE-2018-5104?

CVE-2018-5104 is a use-after-free vulnerability that can occur during font face manipulation in Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

Which software versions are affected by CVE-2018-5104?

CVE-2018-5104 affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

What is the severity of CVE-2018-5104?

CVE-2018-5104 has a severity rating of 9.8 (critical).

How can I fix CVE-2018-5104?

To fix CVE-2018-5104, update Thunderbird to version 52.6 or later, Firefox ESR to version 52.6 or later, or Firefox to version 58 or later.

Where can I find more information about CVE-2018-5104?

You can find more information about CVE-2018-5104 at the following references: [Mozilla Advisory](https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/#CVE-2018-5104), [Red Hat Security Advisory 2018:0122](https://access.redhat.com/errata/RHSA-2018:0122), [Red Hat Security Advisory 2018:0262](https://access.redhat.com/errata/RHSA-2018:0262).

CVE-2018-5104: Use After Free

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is CVE-2018-5104?

Which software versions are affected by CVE-2018-5104?

What is the severity of CVE-2018-5104?

How can I fix CVE-2018-5104?

Where can I find more information about CVE-2018-5104?

Company

Resources

Contact