CVE-2018-5127: Buffer Overflow
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.
Other sources
A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5127
— Red Hat
A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 52.7 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 59 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 52.7 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 147.0.4-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 115.14.0esr-1~deb11u1Fixed in 140.7.0esr-1~deb11u1Fixed in 128.14.0esr-1~deb12u1Fixed in 140.7.0esr-1~deb12u1Fixed in 140.4.0esr-1~deb13u1Fixed in 140.7.0esr-1~deb13u1Fixed in 140.7.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:115.12.0-1~deb11u1Fixed in 1:140.7.1esr-1~deb11u1Fixed in 1:140.6.0esr-1~deb12u1Fixed in 1:140.7.1esr-1~deb12u1Fixed in 1:140.6.0esr-1~deb13u1Fixed in 1:140.7.1esr-1~deb13u1Fixed in 1:140.7.1esr-1
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2018-5127?
CVE-2018-5127 is a vulnerability that allows a buffer overflow when manipulating the SVG animatedPathSegList through script, potentially leading to a crash that can be exploited.
Which software is affected by CVE-2018-5127?
CVE-2018-5127 affects Thunderbird versions earlier than 52.7, Firefox ESR versions earlier than 52.7, and Firefox versions earlier than 59.
What is the severity level of CVE-2018-5127?
CVE-2018-5127 has a severity level of 8.8 (High).
How can I fix CVE-2018-5127?
To fix CVE-2018-5127, you should update your software to Thunderbird 52.7+, Firefox ESR 52.7+, or Firefox 59+.
Where can I find more information about CVE-2018-5127?
You can find more information about CVE-2018-5127 at the following references: Mozilla Security Advisory, Red Hat Security Advisory.