CVE-2018-12387 log
| Source |
|
| Severity | Critical |
| Remote | Yes |
| Type | Information disclosure |
| Description | A vulnerability has been found in Firefox before 62.0.3 where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer being off by 8 bytes after a bailout. This leaks a memory address to the calling function which can be used as part of an exploit inside the sandboxed content process. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-775 | firefox | 62.0.2-1 | 62.0.3-1 | Critical | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 04 Oct 2018 | ASA-201810-6 | AVG-775 | firefox | Critical | multiple issues |
| References |
|---|
https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/#CVE-2018-12387 https://bugzilla.mozilla.org/show_bug.cgi?id=1493903 |