CVE-2018-5091

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 52.6 Firefox versions prior to 58

Description A use-after-free issue can occur during WebRTC connections when interacting with the DTMF timers, resulting in a potentially exploitable crash. The vulnerability is related to the implementation of WebRTC technology in Mozilla Firefox and Firefox-ESR browsers, allowing a remote attacker to cause a denial of service.

Recommendations For Firefox ESR versions prior to 52.6, update to version 52.6 or later. For Firefox versions prior to 58, update to version 58 or later.