CVE-2018-5119: Infoleak

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1420507
• https://www.mozilla.org/security/advisories/mfsa2018-02/
• https://usn.ubuntu.com/3544-1/
• http://www.securityfocus.com/bid/102786
• http://www.securitytracker.com/id/1040270
• https://launchpad.net/bugs/cve/CVE-2018-5119
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-02/
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-02/#CVE-2018-5107
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5119
• https://nvd.nist.gov/vuln/detail/CVE-2018-5119
• https://security-tracker.debian.org/tracker/CVE-2018-5119
• https://ubuntu.com/security/CVE-2018-5119
• https://www.mozilla.org/en-US/security/advisories/mfsa2018-02/#CVE-2018-5119

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2018-02

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2018-5091
• CVE-2018-5092
• CVE-2018-5093
• CVE-2018-5094
• CVE-2018-5095
• CVE-2018-5097
• CVE-2018-5098
• CVE-2018-5099
• CVE-2018-5100
• CVE-2018-5101
• CVE-2018-5102
• CVE-2018-5103
• CVE-2018-5104
• CVE-2018-5105
• CVE-2018-5106
• CVE-2018-5107
• CVE-2018-5108
• CVE-2018-5109
• CVE-2018-5110
• CVE-2018-5111
• CVE-2018-5112
• CVE-2018-5113
• CVE-2018-5114
• CVE-2018-5115
• CVE-2018-5116
• CVE-2018-5117
• CVE-2018-5118
• CVE-2018-5119
• CVE-2018-5121
• CVE-2018-5122
• CVE-2018-5090
• CVE-2018-5089

Frequently Asked Questions

• What is CVE-2018-5119?

  CVE-2018-5119 is a vulnerability in Firefox < 58 that allows the display of cross-origin content in the reader view.

• What is the severity of CVE-2018-5119?

  CVE-2018-5119 has a severity rating of 5.3 (medium).

• Which software products are affected by CVE-2018-5119?

  Firefox versions < 58 are affected by CVE-2018-5119.

• How can I fix CVE-2018-5119?

  Upgrade to Firefox version 58 or higher to fix CVE-2018-5119.

• Where can I find more information about CVE-2018-5119?

  You can find more information about CVE-2018-5119 on the Mozilla Bugzilla page, the Mozilla security advisories page, and the SecurityFocus website.