Description
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurring. This can result in stream data being cast to the wrong type causing a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mozilla Thunderbird
unspecified to < 60affected
Mozilla Firefox ESR
unspecified to < 60.1affectedunspecified to < 52.9affected
Mozilla Firefox
unspecified to < 61affected
References
- https://security.gentoo.org/glsa/201810-01 ↗
- https://www.mozilla.org/security/advisories/mfsa2018-15/ ↗
- https://access.redhat.com/errata/RHSA-2018:2112 ↗
- https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html ↗
- https://security.gentoo.org/glsa/201811-13 ↗
- https://bugzilla.mozilla.org/show_bug.cgi?id=1453127 ↗
- https://www.debian.org/security/2018/dsa-4235 ↗
- https://www.debian.org/security/2018/dsa-4295 ↗
- https://access.redhat.com/errata/RHSA-2018:2113 ↗
- https://www.mozilla.org/security/advisories/mfsa2018-16/ ↗
- http://www.securityfocus.com/bid/104560 ↗
- http://www.securitytracker.com/id/1041193 ↗
- https://www.mozilla.org/security/advisories/mfsa2018-19/ ↗
- https://www.mozilla.org/security/advisories/mfsa2018-17/ ↗
- https://usn.ubuntu.com/3705-1/ ↗
- https://lists.debian.org/debian-lts-announce/2018/06/msg00014.html ↗