Summary
An out-of-bounds write was discovered when processing Vorbis audio data.
If a user were tricked in to opening a specially crafted website, an
attacker could exploit this to cause a denial of service, or execute
arbitrary code. (CVE-2018-5146)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | firefox | 59.0.1+build1-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | firefox | 59.0.1+build1-0ubuntu0.16.04.1 |
Vulnerabilities 1
-
Unscored —
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnera…
References
-
report
https://ubuntu.com/security/CVE-2018-5146