CVE-2018-12389

Name of the Vulnerable Software and Affected Versions: Firefox ESR versions prior to 60.3 Thunderbird versions prior to 60.3

Description: The issue is related to an integer overflow, which may allow a remote attacker to execute arbitrary code. It has been reported that memory safety bugs are present, showing evidence of memory corruption, and it is presumed that these could be exploited with enough effort.

Recommendations: For Firefox ESR versions prior to 60.3, update to version 60.3 or later. For Thunderbird versions prior to 60.3, update to version 60.3 or later.