← back
CVE-2018-5183

CVE-2018-5183

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.1%
exploitation probability
3.1%top 13% of all CVEs
observed exploitation
nono source reports it
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
Affected products
Mozilla · Firefox ESRMozilla · ThunderbirdMozilla · Thunderbird ESR
References
https://access.redhat.com/errata/RHSA-2018:1414https://access.redhat.com/errata/RHSA-2018:1415https://access.redhat.com/errata/RHSA-2018:1725https://access.redhat.com/errata/RHSA-2018:1726https://bugzilla.mozilla.org/show_bug.cgi?id=1454692https://lists.debian.org/debian-lts-announce/2018/05/msg00007.htmlhttps://lists.debian.org/debian-lts-announce/2018/05/msg00013.htmlhttps://security.gentoo.org/glsa/201810-01https://security.gentoo.org/glsa/201811-13https://usn.ubuntu.com/3660-1/https://www.debian.org/security/2018/dsa-4199https://www.debian.org/security/2018/dsa-4209