REDHAT-BUG-1642179
First published: Tue Oct 23 2018(Updated: )
Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. External Reference: <a href="https://www.mozilla.org/en-US/security/advisories/mfsa2018-27/#CVE-2018-12389">https://www.mozilla.org/en-US/security/advisories/mfsa2018-27/#CVE-2018-12389</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Firefox ESR |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.mozilla.org/en-US/security/advisories/mfsa2018-27/#CVE-2018-12389
- https://access.redhat.com/errata/RHSA-2018:3005
- https://access.redhat.com/errata/RHSA-2018:3006
- https://access.redhat.com/errata/RHSA-2018:3531
- https://access.redhat.com/errata/RHSA-2018:3532
- https://bugzilla.redhat.com/show_bug.cgi?id=1642179
Frequently Asked Questions
What is the severity of REDHAT-BUG-1642179?
The severity of REDHAT-BUG-1642179 is considered high due to the potential for memory corruption that could lead to arbitrary code execution.
How do I fix REDHAT-BUG-1642179?
To fix REDHAT-BUG-1642179, you should update Mozilla Firefox ESR to the latest version that addresses the memory safety vulnerabilities.
What does REDHAT-BUG-1642179 affect?
REDHAT-BUG-1642179 affects Mozilla Firefox ESR versions prior to the patches issued for the reported memory safety vulnerabilities.
Can REDHAT-BUG-1642179 be exploited remotely?
Yes, REDHAT-BUG-1642179 can potentially be exploited remotely if an attacker crafts malicious web content.
What are the implications of ignoring REDHAT-BUG-1642179?
Ignoring REDHAT-BUG-1642179 could allow attackers to execute arbitrary code on affected systems, compromising their security.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-12389
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/mozilla
- canonical/firefox esr