Short Name |
HTTP:STC:MOZILLA:FF-AUDIO-OOB |
---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Mozilla Firefox Vorbis Audio Residue Codebook Out of Bounds Write |
Release Date |
2018/05/03 |
Update Number |
3062 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects attempts to exploit a known vulnerability against Mozilla Firefox. Successful exploitation could result in the execution of arbitrary code under the security context of the target user.
The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Android and ARM platforms. This vulnerability affects Firefox ESR < 52.7.2 and Firefox < 59.0.1.