CVE-2018-12386
High · 8.1CVSS
8.1
EPSS
13.4%
Published
Oct 18, 2018
CISA due date
—
The record
A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. This vulnerability affects Firefox ESR < 60.2.2 and Firefox < 62.0.3.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | firefox-esr | 0 | 60.2.2esr-1 |
| Debian:12 | firefox-esr | 0 | 60.2.2esr-1 |
| Debian:13 | firefox-esr | 0 | 60.2.2esr-1 |
| Debian:9 | firefox-esr | 0 | 60.2.2esr-1~deb9u1 |
| Mageia:6 | firefox | 0 | 60.2.2-1.mga6 |
| Mageia:6 | firefox-l10n | 0 | 60.2.2-1.mga6 |
| Red Hat:enterprise_linux:6::client | firefox | 0 | 0:60.2.2-1.el6 |
| Red Hat:enterprise_linux:6::client | firefox-debuginfo | 0 | 0:60.2.2-1.el6 |
| Red Hat:enterprise_linux:6::computenode | firefox | 0 | 0:60.2.2-1.el6 |
| Red Hat:enterprise_linux:6::computenode | firefox-debuginfo | 0 | 0:60.2.2-1.el6 |
| Red Hat:enterprise_linux:6::server | firefox | 0 | 0:60.2.2-1.el6 |
| Red Hat:enterprise_linux:6::server | firefox-debuginfo | 0 | 0:60.2.2-1.el6 |
| Red Hat:enterprise_linux:6::workstation | firefox | 0 | 0:60.2.2-1.el6 |
| Red Hat:enterprise_linux:6::workstation | firefox-debuginfo | 0 | 0:60.2.2-1.el6 |
| Red Hat:enterprise_linux:7::client | firefox | 0 | 0:60.2.2-1.el7_5 |
| Red Hat:enterprise_linux:7::client | firefox-debuginfo | 0 | 0:60.2.2-1.el7_5 |
| Red Hat:enterprise_linux:7::server | firefox | 0 | 0:60.2.2-1.el7_5 |
| Red Hat:enterprise_linux:7::server | firefox-debuginfo | 0 | 0:60.2.2-1.el7_5 |
| Red Hat:enterprise_linux:7::workstation | firefox | 0 | 0:60.2.2-1.el7_5 |
| Red Hat:enterprise_linux:7::workstation | firefox-debuginfo | 0 | 0:60.2.2-1.el7_5 |
| SUSE:Enterprise Storage 4 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Enterprise Storage 4 | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Enterprise Storage 4 | apache2-mod_nss | 0 | 1.0.14-19.6.3 |
| SUSE:Enterprise Storage 4 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Enterprise Storage 4 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Desktop 12 SP3 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Desktop 12 SP3 | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Linux Enterprise Desktop 12 SP3 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Desktop 12 SP3 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Desktop 12 SP4 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Desktop 12 SP4 | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Linux Enterprise Desktop 12 SP4 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Desktop 12 SP4 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 | MozillaFirefox | 0 | 60.2.2-3.13.3 |
| SUSE:Linux Enterprise Module for Desktop Applications 15 | MozillaFirefox-branding-SLE | 0 | 60-4.5.3 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | apache2-mod_nss | 0 | 1.0.14-19.6.3 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Server 12 SP1-LTSS | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | apache2-mod_nss | 0 | 1.0.14-19.6.3 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Server 12 SP2-LTSS | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Server 12 SP3 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Server 12 SP3 | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Linux Enterprise Server 12 SP3 | apache2-mod_nss | 0 | 1.0.14-19.6.3 |
| SUSE:Linux Enterprise Server 12 SP3 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Server 12 SP3 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Server 12 SP4 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Server 12 SP4 | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Linux Enterprise Server 12 SP4 | apache2-mod_nss | 0 | 1.0.14-19.6.3 |
| SUSE:Linux Enterprise Server 12 SP4 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Server 12 SP4 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Server 12-LTSS | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Server 12-LTSS | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Linux Enterprise Server 12-LTSS | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Server 12-LTSS | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | apache2-mod_nss | 0 | 1.0.14-19.6.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP1 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | apache2-mod_nss | 0 | 1.0.14-19.6.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP2 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | apache2-mod_nss | 0 | 1.0.14-19.6.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP3 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | apache2-mod_nss | 0 | 1.0.14-19.6.3 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP4 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Software Development Kit 12 SP3 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP3 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP3 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:Linux Enterprise Software Development Kit 12 SP4 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP4 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP4 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| SUSE:OpenStack Cloud 7 | MozillaFirefox | 0 | 60.2.2esr-109.46.1 |
| SUSE:OpenStack Cloud 7 | MozillaFirefox-branding-SLE | 0 | 60-32.3.1 |
| SUSE:OpenStack Cloud 7 | apache2-mod_nss | 0 | 1.0.14-19.6.3 |
| SUSE:OpenStack Cloud 7 | mozilla-nspr | 0 | 4.19-19.3.1 |
| SUSE:OpenStack Cloud 7 | mozilla-nss | 0 | 3.36.4-58.15.3 |
| Ubuntu:14.04:LTS | firefox | 0 | 62.0.3+build1-0ubuntu0.14.04.2 |
| Ubuntu:14.04:LTS | thunderbird | 0 | 1:60.4.0+build2-0ubuntu0.14.04.1 |
| Ubuntu:16.04:LTS | firefox | 0 | 62.0.3+build1-0ubuntu0.16.04.2 |
| Ubuntu:16.04:LTS | thunderbird | 0 | 1:60.4.0+build2-0ubuntu0.16.04.1 |
| Ubuntu:18.04:LTS | firefox | 0 | 62.0.3+build1-0ubuntu0.18.04.1 |
| Ubuntu:18.04:LTS | mozjs38 | 0 | No fix |
| Ubuntu:18.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:18.04:LTS | thunderbird | 0 | 1:60.4.0+build2-0ubuntu0.18.04.1 |
| Ubuntu:20.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | mozjs38 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | mozjs52 | 0 | No fix |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 92.0-1.2 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2025-0243 Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 128.5, and… Also affects firefox-esr
- CVE-2025-0237 The WebChannel API, which is used to transport various information across processes, did… Also affects firefox-esr
- CVE-2025-0238 Assuming a controlled failed memory allocation, an attacker could have caused a… Also affects firefox-esr
- CVE-2025-0240 Parsing a JavaScript module as JSON could, under some circumstances, cause… Also affects firefox-esr
- CVE-2025-0239 When using Alt-Svc, ALPN did not properly validate certificates when the original server… Also affects firefox-esr
- CVE-2025-0241 When segmenting specially crafted text, segmentation would corrupt memory leading to a… Also affects firefox-esr
- CVE-2025-0242 Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR 115.18, Firefox… Also affects firefox-esr
- CVE-2024-11704 A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when… Also affects firefox-esr