CVE-2018-12361: An integer overflow can occur in the SwizzleData code while calculating buffer sizes

Description

An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, and Firefox < 61.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)2.8% · higher than 86% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

FI

Firefox · Mozilla

before 61.0 · source: NVD

DL

Debian Linux · Debian

8.0; 9.0 · source: NVD

FE

Firefox Esr · Mozilla

before 60.1 · source: NVD

TH

Thunderbird · Mozilla

before 60.0 · source: NVD

UL

Ubuntu Linux · Canonical

14.04; 16.04; 17.10; 18.04 · source: NVD