1. Home
  2. Security Advisories
  3. FreeBSD
  4. FREEBSD:7943794F-707F-4E31-9FEA-3BBF1DDCEDC1

[FREEBSD:7943794F-707F-4E31-9FEA-3BBF1DDCEDC1] mozilla -- multiple vulnerabilities

Severity Critical
Affected Packages 9
CVEs 2
Info Packages References Vulnerabilities

The Mozilla Foundation reports:

  CVE-2018-5146: Out of bounds memory write in libvorbis
  An out of bounds memory write while processing Vorbis
    audio data was reported through the Pwn2Own contest.
  CVE-2018-5147: Out of bounds memory write in libtremor
  The libtremor library has the same flaw as
    CVE-2018-5146. This library is used by Firefox in place of
    libvorbis on Android and ARM platforms.
Package Affected Version
pkg:freebsd/waterfox < 56.0.4.36_3
pkg:freebsd/thunderbird < 52.7.0
pkg:freebsd/seamonkey < 2.49.3
pkg:freebsd/linux-firefox < 52.7.2,2
pkg:freebsd/libxul < 52.7.3
pkg:freebsd/libvorbis < 1.3.6,3
pkg:freebsd/libtremor < 1.2.1.s20180316
pkg:freebsd/firefox-esr < 52.7.2,1
pkg:freebsd/firefox < 59.0.1,1
ID
FREEBSD:7943794F-707F-4E31-9FEA-3BBF1DDCEDC1
Severity
critical
Severity from
CVE-2018-5147
URL
http://vuxml.freebsd.org/freebsd/7943794f-707f-4e31-9fea-3bbf1ddcedc1.html
Published
2018-03-16T00:00:00
(6 years ago)
Modified
2018-03-16T00:00:00
(6 years ago)
Rights
FreeBSD VuXML Security Team
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:freebsd/waterfox waterfox < 56.0.4.36_3
Affected pkg:freebsd/thunderbird thunderbird < 52.7.0
Affected pkg:freebsd/seamonkey seamonkey < 2.49.3
Affected pkg:freebsd/linux-firefox linux-firefox < 52.7.2,2
Affected pkg:freebsd/libxul libxul < 52.7.3
Affected pkg:freebsd/libvorbis libvorbis < 1.3.6,3
Affected pkg:freebsd/libtremor libtremor < 1.2.1.s20180316
Affected pkg:freebsd/firefox-esr firefox-esr < 52.7.2,1
Affected pkg:freebsd/firefox firefox < 59.0.1,1
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date