Show vulnerabilities with patch / with exploit

Multiple vulnerabilities in Mozilla Firefox and Firefox ESR



Published: 2018-10-03
Severity High
Patch available YES
Number of vulnerabilities 2
CVE ID CVE-2018-12386
CVE-2018-12387
CWE ID CWE-843
CWE-193
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe
Firefox ESR
Client/Desktop applications / Web browsers

Mozilla Firefox
Client/Desktop applications / Web browsers

Vendor Mozilla

Security Advisory

1) Type Confusion

Severity: High

CVSSv3: 7.7 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C] [PCI]

CVE-ID: CVE-2018-12386

CWE-ID: CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a type confusion error in register allocation within the JavaScript engine. A remote attacker can create a specially crafted web page, trick the victim into visiting it, trigger a type confusion error that will allow arbitrary read and write operations within the sandboxed content process.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Firefox ESR: 60.0, 60.1.0, 60.2.0, 60.2.1

Mozilla Firefox: 60.0, 60.0.2, 61.0, 61.0.1, 61.0.2, 62.0, 62.0.1, 62.0.2, ESR 60.2

CPE External links

https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to trick the victim to visit a specially crafted website.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Off-by-one

Severity: High

CVSSv3: 7.7 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C] [PCI]

CVE-ID: CVE-2018-12387

CWE-ID: CWE-193 - Off-by-one Error

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to an off-by-one error within the JavaScript JIT compiler when processing Array.prototype.push with multiple arguments. A remote attacker can create a specially crafted web page, trick the victim into visiting it, trigger an off-by-eight error and execute arbitrary code on the target system inside the sandboxed content process.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Mozilla Firefox: 60.0, 60.0.2, 61.0, 61.0.1, 61.0.2, 62.0, 62.0.1, 62.0.2

Firefox ESR: 60.0, 60.1.0, 60.2.0, 60.2.1

CPE External links

https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to trick the victim to visit a specially crafted website.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.