CVE-2018-12365
CVE-2018-12365
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 3.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
18 Oct 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://access.redhat.com/errata/RHSA-2018:2112https://access.redhat.com/errata/RHSA-2018:2113https://access.redhat.com/errata/RHSA-2018:2251https://access.redhat.com/errata/RHSA-2018:2252https://bugzilla.mozilla.org/show_bug.cgi?id=1459206https://lists.debian.org/debian-lts-announce/2018/06/msg00014.htmlhttps://lists.debian.org/debian-lts-announce/2018/07/msg00013.htmlhttps://security.gentoo.org/glsa/201810-01https://security.gentoo.org/glsa/201811-13https://usn.ubuntu.com/3705-1/https://usn.ubuntu.com/3714-1/https://www.debian.org/security/2018/dsa-4235