CVE-2018-5127: Buffer Overflow
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.
Other sources
A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5127
— Red Hat
A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2018-5127?
CVE-2018-5127 is a vulnerability that allows a buffer overflow when manipulating the SVG animatedPathSegList through script, potentially leading to a crash that can be exploited.
Which software is affected by CVE-2018-5127?
CVE-2018-5127 affects Thunderbird versions earlier than 52.7, Firefox ESR versions earlier than 52.7, and Firefox versions earlier than 59.
What is the severity level of CVE-2018-5127?
CVE-2018-5127 has a severity level of 8.8 (High).
How can I fix CVE-2018-5127?
To fix CVE-2018-5127, you should update your software to Thunderbird 52.7+, Firefox ESR 52.7+, or Firefox 59+.
Where can I find more information about CVE-2018-5127?
You can find more information about CVE-2018-5127 at the following references: Mozilla Security Advisory, Red Hat Security Advisory.