Your submission was sent successfully! Close

CVE-2018-12389

Published: 24 January 2019

Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 60.3 and Thunderbird < 60.3.

Priority

Low

CVSS 3 base score: 8.8

Status

Package Release Status
thunderbird
Launchpad, Ubuntu, Debian
bionic
Released (1:60.4.0+build2-0ubuntu0.18.04.1)
cosmic
Released (1:60.4.0+build2-0ubuntu0.18.10.1)
precise Does not exist

trusty Does not exist
(trusty was released [1:60.4.0+build2-0ubuntu0.14.04.1])
upstream
Released (60.3)
xenial
Released (1:60.4.0+build2-0ubuntu0.16.04.1)