Security Advisory

CVE-2018-12361

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-10-18 13:00:00

Last updated 2024-08-05 08:31:00

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, and Firefox < 61.

← Browse all CVEs View on cve.org ↗