1. Home
  2. Security Advisories
  3. Mozilla
  4. MFSA-2018-22

[MFSA-2018-22] Security vulnerabilities fixed in Firefox 62.0.2

Severity Moderate
Affected Packages 1
Fixed Packages 1
CVEs 1
Info Packages References Vulnerabilities
  • CVE-2018-12385: Crash in TransportSecurityInfo due to cached data (moderate) A potentially exploitable crash in <code>TransportSecurityInfo</code> used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache or from locally installed malware. This issue also triggers a non-exploitable startup crash for users switching between the Nightly and Release versions of Firefox if the same profile is used.
Package Affected Version
pkg:mozilla/Firefox < 62.0.2
Package Fixed Version
pkg:mozilla/Firefox = 62.0.2
ID
MFSA-2018-22
Severity
moderate
URL
https://www.mozilla.org/en-US/security/advisories/mfsa2018-22
Published
2018-09-21T00:00:00
(6 years ago)
Modified
2018-09-21T00:00:00
(6 years ago)
Other Advisories
Source # ID Name URL
Bugzilla 1490585 https://bugzilla.mozilla.org/show_bug.cgi?id=1490585
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:mozilla/Firefox Firefox < 62.0.2
Fixed pkg:mozilla/Firefox Firefox = 62.0.2
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date