CVE-2018-12401

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 63

Description The issue exists due to insufficient input validation, allowing a remote attacker to cause a denial of service using a specially crafted URI. Some special resource URIs can cause a non-exploitable crash if loaded with optional parameters following a '?' in the parsed string, potentially leading to denial of service attacks.

Recommendations For versions prior to 63, update to version 63 or later to resolve the issue. As a temporary workaround, consider restricting the use of special resource URIs with optional parameters to minimize the risk of exploitation. Avoid using URIs with parameters following a '?' in the parsed string until the issue is resolved.