Bug 1635451 (CVE-2018-12386)

Summary:	CVE-2018-12386 Mozilla: type confusion in JavaScript
Product:	[Other] Security Response	Reporter:	Doran Moppert <dmoppert>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	unspecified	CC:	cschalle, gecko-bugs-nobody, jhorak, security-response-team, stransky, yozone
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-11-13 05:18:49 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1635173, 1635174, 1635175
Bug Blocks:	1635177

Description Doran Moppert 2018-10-02 23:19:19 UTC

A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered.



External Reference:

https://www.mozilla.org/en-US/security/advisories/mfsa2018-24/#CVE-2018-12386

Comment 1 Doran Moppert 2018-10-02 23:19:24 UTC

Acknowledgments:

Name: the Mozilla project
Upstream: Niklas Baumstark, Samuel Groß, Bruno Keith via Beyond Security's SecuriTeam Secure Disclosure program

Comment 3 errata-xmlrpc 2018-10-08 08:26:48 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6

Via RHSA-2018:2881 https://access.redhat.com/errata/RHSA-2018:2881

Comment 4 errata-xmlrpc 2018-10-08 19:54:46 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7

Via RHSA-2018:2884 https://access.redhat.com/errata/RHSA-2018:2884