PT-2019-1342

CVE-2018-18504

·

Publicado

2019-01-29

·

Atualizado

2024-12-12

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 65
Description The issue is caused by a buffer overflow in the Texture Client Handler component of the Firefox browser, allowing a remote attacker to potentially cause a denial of service using a specially crafted web page. It can also lead to a crash and out-of-bounds read when a texture client's buffer is freed while still in use during graphic operations, potentially allowing the reading of memory from freed buffers.
Recommendations For versions prior to 65, update to version 65 or later to resolve the issue. As a temporary workaround, consider restricting the use of graphic-intensive operations until a patch is applied.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ALT-PU-2019-1173
ALT-PU-2019-2324
ALT-PU-2019-2486
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
USN-3874-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾