CVE-2018-12385

Vulnerability Description

A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache or from locally installed malware. This issue also triggers a non-exploitable startup crash for users switching between the Nightly and Release versions of Firefox if the same profile is used. This vulnerability affects Thunderbird < 60.2.1, Firefox ESR < 60.2.1, and Firefox < 62.0.2.

CVSS Score

Affected Products

Related Weaknesses (CWE)

References

• http://www.securityfocus.com/bid/105380Third Party AdvisoryVDB Entry
• http://www.securitytracker.com/id/1041700Third Party AdvisoryVDB Entry
• http://www.securitytracker.com/id/1041701Third Party AdvisoryVDB Entry
• https://access.redhat.com/errata/RHSA-2018:2834Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:2835Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3403Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3458Third Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1490585Issue TrackingPermissions RequiredVendor Advisory
• https://lists.debian.org/debian-lts-announce/2018/11/msg00011.htmlMailing ListThird Party Advisory
• https://security.gentoo.org/glsa/201810-01Third Party Advisory
• https://security.gentoo.org/glsa/201811-13Third Party Advisory
• https://usn.ubuntu.com/3778-1/Third Party Advisory
• https://usn.ubuntu.com/3793-1/Third Party Advisory
• https://www.debian.org/security/2018/dsa-4304Third Party Advisory
• https://www.debian.org/security/2018/dsa-4327Third Party Advisory