Vulnerability-Lookup

UBUNTU-CVE-2018-5118 (CVE-2018-5118)

Vulnerability from osv_ubuntu – Published: 2018-01-23 00:00 – Updated: 2026-04-22 07:38 – Source website

Details

The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through "file:" URLs from the local file system. This loading is blocked by the sandbox but could expose local data if combined with another attack that escapes sandbox protections. This vulnerability affects Firefox < 58.

Severity

5.3 (Medium)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2018-5118	REPORT
	https://www.mozilla.org/en-US/security/advisories…	REPORT
	https://ubuntu.com/security/notices/USN-3544-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-5118	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "58.0+build6-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-globalmenu",
            "binary_version": "58.0+build6-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "58.0+build6-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-testsuite",
            "binary_version": "58.0+build6-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@58.0+build6-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "58.0+build6-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "24.0+build1-0ubuntu1",
        "25.0+build3-0ubuntu0.13.10.1",
        "28.0~b2+build1-0ubuntu2",
        "28.0+build1-0ubuntu1",
        "28.0+build2-0ubuntu1",
        "28.0+build2-0ubuntu2",
        "29.0+build1-0ubuntu0.14.04.2",
        "30.0+build1-0ubuntu0.14.04.3",
        "31.0+build1-0ubuntu0.14.04.1",
        "32.0+build1-0ubuntu0.14.04.1",
        "32.0.3+build1-0ubuntu0.14.04.1",
        "33.0+build2-0ubuntu0.14.04.1",
        "34.0+build2-0ubuntu0.14.04.1",
        "35.0+build3-0ubuntu0.14.04.2",
        "35.0.1+build1-0ubuntu0.14.04.1",
        "36.0+build2-0ubuntu0.14.04.4",
        "36.0.1+build2-0ubuntu0.14.04.1",
        "36.0.4+build1-0ubuntu0.14.04.1",
        "37.0+build2-0ubuntu0.14.04.1",
        "37.0.1+build1-0ubuntu0.14.04.1",
        "37.0.2+build1-0ubuntu0.14.04.1",
        "38.0+build3-0ubuntu0.14.04.1",
        "39.0+build5-0ubuntu0.14.04.1",
        "39.0.3+build2-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.4",
        "40.0.3+build1-0ubuntu0.14.04.1",
        "41.0+build3-0ubuntu0.14.04.1",
        "41.0.1+build2-0ubuntu0.14.04.1",
        "41.0.2+build2-0ubuntu0.14.04.1",
        "42.0+build2-0ubuntu0.14.04.1",
        "43.0+build1-0ubuntu0.14.04.1",
        "43.0.4+build3-0ubuntu0.14.04.1",
        "44.0+build3-0ubuntu0.14.04.1",
        "44.0.1+build2-0ubuntu0.14.04.1",
        "44.0.2+build1-0ubuntu0.14.04.1",
        "45.0+build2-0ubuntu0.14.04.1",
        "45.0.1+build1-0ubuntu0.14.04.2",
        "45.0.2+build1-0ubuntu0.14.04.1",
        "46.0+build5-0ubuntu0.14.04.2",
        "46.0.1+build1-0ubuntu0.14.04.3",
        "47.0+build3-0ubuntu0.14.04.1",
        "48.0+build2-0ubuntu0.14.04.1",
        "49.0+build4-0ubuntu0.14.04.1",
        "49.0.2+build2-0ubuntu0.14.04.1",
        "50.0+build2-0ubuntu0.14.04.2",
        "50.0.2+build1-0ubuntu0.14.04.1",
        "50.1.0+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.2",
        "52.0+build2-0ubuntu0.14.04.1",
        "52.0.1+build2-0ubuntu0.14.04.1",
        "52.0.2+build1-0ubuntu0.14.04.1",
        "53.0+build6-0ubuntu0.14.04.1",
        "53.0.2+build1-0ubuntu0.14.04.2",
        "53.0.3+build1-0ubuntu0.14.04.2",
        "54.0+build3-0ubuntu0.14.04.1",
        "55.0.1+build2-0ubuntu0.14.04.2",
        "55.0.2+build1-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.2",
        "57.0+build4-0ubuntu0.14.04.4",
        "57.0+build4-0ubuntu0.14.04.5",
        "57.0.1+build2-0ubuntu0.14.04.1",
        "57.0.3+build1-0ubuntu0.14.04.1",
        "57.0.4+build1-0ubuntu0.14.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "58.0+build6-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-globalmenu",
            "binary_version": "58.0+build6-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "58.0+build6-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-testsuite",
            "binary_version": "58.0+build6-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@58.0+build6-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "58.0+build6-0ubuntu0.16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "41.0.2+build2-0ubuntu1",
        "42.0+build2-0ubuntu1",
        "44.0+build3-0ubuntu2",
        "44.0.1+build1-0ubuntu1",
        "44.0.2+build1-0ubuntu1",
        "45.0+build2-0ubuntu1",
        "45.0.1+build1-0ubuntu1",
        "45.0.2+build1-0ubuntu1",
        "46.0+build5-0ubuntu0.16.04.2",
        "46.0.1+build1-0ubuntu0.16.04.2",
        "47.0+build3-0ubuntu0.16.04.1",
        "48.0+build2-0ubuntu0.16.04.1",
        "49.0+build4-0ubuntu0.16.04.1",
        "49.0.2+build2-0ubuntu0.16.04.2",
        "50.0+build2-0ubuntu0.16.04.2",
        "50.0.2+build1-0ubuntu0.16.04.1",
        "50.1.0+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.2",
        "52.0+build2-0ubuntu0.16.04.1",
        "52.0.1+build2-0ubuntu0.16.04.1",
        "52.0.2+build1-0ubuntu0.16.04.1",
        "53.0+build6-0ubuntu0.16.04.1",
        "53.0.2+build1-0ubuntu0.16.04.2",
        "53.0.3+build1-0ubuntu0.16.04.2",
        "54.0+build3-0ubuntu0.16.04.1",
        "55.0.1+build2-0ubuntu0.16.04.2",
        "55.0.2+build1-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.2",
        "57.0+build4-0ubuntu0.16.04.5",
        "57.0+build4-0ubuntu0.16.04.6",
        "57.0.1+build2-0ubuntu0.16.04.1",
        "57.0.3+build1-0ubuntu0.16.04.1",
        "57.0.4+build1-0ubuntu0.16.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "59.0.1+build1-0ubuntu1"
          },
          {
            "binary_name": "firefox-globalmenu",
            "binary_version": "59.0.1+build1-0ubuntu1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "59.0.1+build1-0ubuntu1"
          },
          {
            "binary_name": "firefox-testsuite",
            "binary_version": "59.0.1+build1-0ubuntu1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@59.0.1+build1-0ubuntu1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "59.0.1+build1-0ubuntu1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "56.0+build6-0ubuntu1",
        "57.0.1+build2-0ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through \"file:\" URLs from the local file system. This loading is blocked by the sandbox but could expose local data if combined with another attack that escapes sandbox protections. This vulnerability affects Firefox \u003c 58.",
  "id": "UBUNTU-CVE-2018-5118",
  "modified": "2026-04-22T07:38:32Z",
  "published": "2018-01-23T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5118"
    },
    {
      "type": "REPORT",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2018-02/"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3544-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-5118"
    }
  ],
  "related": [
    "USN-3544-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-5118"
  ]
}

CVE-2018-5118 (GCVE-0-2018-5118)

Vulnerability from cvelistv5 – Published: 2018-06-11 21:00 – Updated: 2024-08-05 05:26

Summary

Severity

No CVSS data available.

CWE

Activity Stream images can attempt to load local content through file:

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 546 records in the last 180 days details

References

5 references

URL	Tags
http://www.securitytracker.com/id/1040270	vdb-entryx_refsource_SECTRACK
https://usn.ubuntu.com/3544-1/	vendor-advisoryx_refsource_UBUNTU
http://www.securityfocus.com/bid/102786	vdb-entryx_refsource_BID
https://bugzilla.mozilla.org/show_bug.cgi?id=1420049	x_refsource_CONFIRM
https://www.mozilla.org/security/advisories/mfsa2…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Mozilla	Firefox	Affected: unspecified , < 58 (custom)

Date Public

2018-01-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:26:46.969Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1040270",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040270"
          },
          {
            "name": "USN-3544-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3544-1/"
          },
          {
            "name": "102786",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102786"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1420049"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2018-02/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "58",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-01-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through \"file:\" URLs from the local file system. This loading is blocked by the sandbox but could expose local data if combined with another attack that escapes sandbox protections. This vulnerability affects Firefox \u003c 58."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Activity Stream images can attempt to load local content through file:",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01.000Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "1040270",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040270"
        },
        {
          "name": "USN-3544-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3544-1/"
        },
        {
          "name": "102786",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102786"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1420049"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2018-02/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2018-5118",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "58"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue was discovered where the page could attempt to create these images through \"file:\" URLs from the local file system. This loading is blocked by the sandbox but could expose local data if combined with another attack that escapes sandbox protections. This vulnerability affects Firefox \u003c 58."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Activity Stream images can attempt to load local content through file:"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1040270",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040270"
            },
            {
              "name": "USN-3544-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3544-1/"
            },
            {
              "name": "102786",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102786"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1420049",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1420049"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2018-02/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2018-02/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2018-5118",
    "datePublished": "2018-06-11T21:00:00.000Z",
    "dateReserved": "2018-01-03T00:00:00.000Z",
    "dateUpdated": "2024-08-05T05:26:46.969Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

USN-3544-1 (UBUNTU-CVE-2018-5089)

Vulnerability from osv_ubuntu – Published: 2018-01-24 20:27 – Updated: 2026-04-22 07:36 – Source website

Summary

firefox vulnerabilities

Details

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, spoof the origin in audio capture prompts, trick the user in to providing HTTP credentials for another origin, spoof the addressbar contents, or execute arbitrary code. (CVE-2018-5089, CVE-2018-5090, CVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094, CVE-2018-5095, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5100, CVE-2018-5101, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5109, CVE-2018-5114, CVE-2018-5115, CVE-2018-5117, CVE-2018-5122)

Multiple security issues were discovered in WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to gain additional privileges, bypass same-origin restrictions, or execute arbitrary code. (CVE-2018-5105, CVE-2018-5113, CVE-2018-5116)

A security issue was discovered with the developer tools. If a user were tricked in to opening a specially crafted website with the developer tools open, an attacker could potentially exploit this to obtain sensitive information from other origins. (CVE-2018-5106)

A security issue was discovered with printing. An attacker could potentially exploit this to obtain sensitive information from local files. (CVE-2018-5107)

It was discovered that manually entered blob URLs could be accessed by subsequent private browsing tabs. If a user were tricked in to entering a blob URL, an attacker could potentially exploit this to obtain sensitive information from a private browsing context. (CVE-2018-5108)

It was discovered that dragging certain specially formatted URLs to the addressbar could cause the wrong URL to be displayed. If a user were tricked in to opening a specially crafted website and dragging a URL to the addressbar, an attacker could potentially exploit this to spoof the addressbar contents. (CVE-2018-5111)

It was discovered that WebExtension developer tools panels could open non-relative URLs. If a user were tricked in to installing a specially crafted extension and running the developer tools, an attacker could potentially exploit this to gain additional privileges. (CVE-2018-5112)

It was discovered that ActivityStream images can attempt to load local content through file: URLs. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this in combination with another vulnerability that allowed sandbox protections to be bypassed, in order to obtain sensitive information from local files. (CVE-2018-5118)

It was discovered that the reader view will load cross-origin content in violation of CORS headers. An attacker could exploit this to bypass CORS restrictions. (CVE-2018-5119)

References

URL

Type

	https://ubuntu.com/security/notices/USN-3544-1	ADVISORY
	https://ubuntu.com/security/CVE-2018-5089	REPORT
	https://ubuntu.com/security/CVE-2018-5090	REPORT
	https://ubuntu.com/security/CVE-2018-5091	REPORT
	https://ubuntu.com/security/CVE-2018-5092	REPORT
	https://ubuntu.com/security/CVE-2018-5093	REPORT
	https://ubuntu.com/security/CVE-2018-5094	REPORT
	https://ubuntu.com/security/CVE-2018-5095	REPORT
	https://ubuntu.com/security/CVE-2018-5097	REPORT
	https://ubuntu.com/security/CVE-2018-5098	REPORT
	https://ubuntu.com/security/CVE-2018-5099	REPORT
	https://ubuntu.com/security/CVE-2018-5100	REPORT
	https://ubuntu.com/security/CVE-2018-5101	REPORT
	https://ubuntu.com/security/CVE-2018-5102	REPORT
	https://ubuntu.com/security/CVE-2018-5103	REPORT
	https://ubuntu.com/security/CVE-2018-5104	REPORT
	https://ubuntu.com/security/CVE-2018-5105	REPORT
	https://ubuntu.com/security/CVE-2018-5106	REPORT
	https://ubuntu.com/security/CVE-2018-5107	REPORT
	https://ubuntu.com/security/CVE-2018-5108	REPORT
	https://ubuntu.com/security/CVE-2018-5109	REPORT
	https://ubuntu.com/security/CVE-2018-5111	REPORT
	https://ubuntu.com/security/CVE-2018-5112	REPORT
	https://ubuntu.com/security/CVE-2018-5113	REPORT
	https://ubuntu.com/security/CVE-2018-5114	REPORT
	https://ubuntu.com/security/CVE-2018-5115	REPORT
	https://ubuntu.com/security/CVE-2018-5116	REPORT
	https://ubuntu.com/security/CVE-2018-5117	REPORT
	https://ubuntu.com/security/CVE-2018-5118	REPORT
	https://ubuntu.com/security/CVE-2018-5119	REPORT
	https://ubuntu.com/security/CVE-2018-5122	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-5089",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5090",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5091",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5092",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5093",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5094",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5095",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5097",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5098",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5099",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5100",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5101",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5102",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5103",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5104",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5105",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5106",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5107",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5108",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5109",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5111",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5112",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5113",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5114",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5115",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5116",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5117",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5118",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5119",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5122",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "58.0+build6-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-globalmenu",
            "binary_version": "58.0+build6-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "58.0+build6-0ubuntu0.14.04.1"
          },
          {
            "binary_name": "firefox-testsuite",
            "binary_version": "58.0+build6-0ubuntu0.14.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:14.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@58.0+build6-0ubuntu0.14.04.1?arch=source\u0026distro=trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "58.0+build6-0ubuntu0.14.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "24.0+build1-0ubuntu1",
        "25.0+build3-0ubuntu0.13.10.1",
        "28.0~b2+build1-0ubuntu2",
        "28.0+build1-0ubuntu1",
        "28.0+build2-0ubuntu1",
        "28.0+build2-0ubuntu2",
        "29.0+build1-0ubuntu0.14.04.2",
        "30.0+build1-0ubuntu0.14.04.3",
        "31.0+build1-0ubuntu0.14.04.1",
        "32.0+build1-0ubuntu0.14.04.1",
        "32.0.3+build1-0ubuntu0.14.04.1",
        "33.0+build2-0ubuntu0.14.04.1",
        "34.0+build2-0ubuntu0.14.04.1",
        "35.0+build3-0ubuntu0.14.04.2",
        "35.0.1+build1-0ubuntu0.14.04.1",
        "36.0+build2-0ubuntu0.14.04.4",
        "36.0.1+build2-0ubuntu0.14.04.1",
        "36.0.4+build1-0ubuntu0.14.04.1",
        "37.0+build2-0ubuntu0.14.04.1",
        "37.0.1+build1-0ubuntu0.14.04.1",
        "37.0.2+build1-0ubuntu0.14.04.1",
        "38.0+build3-0ubuntu0.14.04.1",
        "39.0+build5-0ubuntu0.14.04.1",
        "39.0.3+build2-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.1",
        "40.0+build4-0ubuntu0.14.04.4",
        "40.0.3+build1-0ubuntu0.14.04.1",
        "41.0+build3-0ubuntu0.14.04.1",
        "41.0.1+build2-0ubuntu0.14.04.1",
        "41.0.2+build2-0ubuntu0.14.04.1",
        "42.0+build2-0ubuntu0.14.04.1",
        "43.0+build1-0ubuntu0.14.04.1",
        "43.0.4+build3-0ubuntu0.14.04.1",
        "44.0+build3-0ubuntu0.14.04.1",
        "44.0.1+build2-0ubuntu0.14.04.1",
        "44.0.2+build1-0ubuntu0.14.04.1",
        "45.0+build2-0ubuntu0.14.04.1",
        "45.0.1+build1-0ubuntu0.14.04.2",
        "45.0.2+build1-0ubuntu0.14.04.1",
        "46.0+build5-0ubuntu0.14.04.2",
        "46.0.1+build1-0ubuntu0.14.04.3",
        "47.0+build3-0ubuntu0.14.04.1",
        "48.0+build2-0ubuntu0.14.04.1",
        "49.0+build4-0ubuntu0.14.04.1",
        "49.0.2+build2-0ubuntu0.14.04.1",
        "50.0+build2-0ubuntu0.14.04.2",
        "50.0.2+build1-0ubuntu0.14.04.1",
        "50.1.0+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.1",
        "51.0.1+build2-0ubuntu0.14.04.2",
        "52.0+build2-0ubuntu0.14.04.1",
        "52.0.1+build2-0ubuntu0.14.04.1",
        "52.0.2+build1-0ubuntu0.14.04.1",
        "53.0+build6-0ubuntu0.14.04.1",
        "53.0.2+build1-0ubuntu0.14.04.2",
        "53.0.3+build1-0ubuntu0.14.04.2",
        "54.0+build3-0ubuntu0.14.04.1",
        "55.0.1+build2-0ubuntu0.14.04.2",
        "55.0.2+build1-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.1",
        "56.0+build6-0ubuntu0.14.04.2",
        "57.0+build4-0ubuntu0.14.04.4",
        "57.0+build4-0ubuntu0.14.04.5",
        "57.0.1+build2-0ubuntu0.14.04.1",
        "57.0.3+build1-0ubuntu0.14.04.1",
        "57.0.4+build1-0ubuntu0.14.04.1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-5089",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5090",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5091",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5092",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5093",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5094",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5095",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5097",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5098",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5099",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5100",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5101",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5102",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5103",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5104",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5105",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5106",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5107",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5108",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5109",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5111",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5112",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5113",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5114",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5115",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5116",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5117",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5118",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5119",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-5122",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "firefox",
            "binary_version": "58.0+build6-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-globalmenu",
            "binary_version": "58.0+build6-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-mozsymbols",
            "binary_version": "58.0+build6-0ubuntu0.16.04.1"
          },
          {
            "binary_name": "firefox-testsuite",
            "binary_version": "58.0+build6-0ubuntu0.16.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "firefox",
        "purl": "pkg:deb/ubuntu/firefox@58.0+build6-0ubuntu0.16.04.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "58.0+build6-0ubuntu0.16.04.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "41.0.2+build2-0ubuntu1",
        "42.0+build2-0ubuntu1",
        "44.0+build3-0ubuntu2",
        "44.0.1+build1-0ubuntu1",
        "44.0.2+build1-0ubuntu1",
        "45.0+build2-0ubuntu1",
        "45.0.1+build1-0ubuntu1",
        "45.0.2+build1-0ubuntu1",
        "46.0+build5-0ubuntu0.16.04.2",
        "46.0.1+build1-0ubuntu0.16.04.2",
        "47.0+build3-0ubuntu0.16.04.1",
        "48.0+build2-0ubuntu0.16.04.1",
        "49.0+build4-0ubuntu0.16.04.1",
        "49.0.2+build2-0ubuntu0.16.04.2",
        "50.0+build2-0ubuntu0.16.04.2",
        "50.0.2+build1-0ubuntu0.16.04.1",
        "50.1.0+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.1",
        "51.0.1+build2-0ubuntu0.16.04.2",
        "52.0+build2-0ubuntu0.16.04.1",
        "52.0.1+build2-0ubuntu0.16.04.1",
        "52.0.2+build1-0ubuntu0.16.04.1",
        "53.0+build6-0ubuntu0.16.04.1",
        "53.0.2+build1-0ubuntu0.16.04.2",
        "53.0.3+build1-0ubuntu0.16.04.2",
        "54.0+build3-0ubuntu0.16.04.1",
        "55.0.1+build2-0ubuntu0.16.04.2",
        "55.0.2+build1-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.1",
        "56.0+build6-0ubuntu0.16.04.2",
        "57.0+build4-0ubuntu0.16.04.5",
        "57.0+build4-0ubuntu0.16.04.6",
        "57.0.1+build2-0ubuntu0.16.04.1",
        "57.0.3+build1-0ubuntu0.16.04.1",
        "57.0.4+build1-0ubuntu0.16.04.1"
      ]
    }
  ],
  "aliases": [],
  "details": "Multiple security issues were discovered in Firefox. If a user were\ntricked in to opening a specially crafted website, an attacker could\npotentially exploit these to cause a denial of service via application\ncrash, spoof the origin in audio capture prompts, trick the user in to\nproviding HTTP credentials for another origin, spoof the addressbar\ncontents, or execute arbitrary code. (CVE-2018-5089, CVE-2018-5090,\nCVE-2018-5091, CVE-2018-5092, CVE-2018-5093, CVE-2018-5094, CVE-2018-5095,\nCVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5100, CVE-2018-5101,\nCVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5109, CVE-2018-5114,\nCVE-2018-5115, CVE-2018-5117, CVE-2018-5122)\n\nMultiple security issues were discovered in WebExtensions. If a user were\ntricked in to installing a specially crafted extension, an attacker could\npotentially exploit these to gain additional privileges, bypass\nsame-origin restrictions, or execute arbitrary code. (CVE-2018-5105,\nCVE-2018-5113, CVE-2018-5116)\n\nA security issue was discovered with the developer tools. If a user were\ntricked in to opening a specially crafted website with the developer tools\nopen, an attacker could potentially exploit this to obtain sensitive\ninformation from other origins. (CVE-2018-5106)\n\nA security issue was discovered with printing. An attacker could\npotentially exploit this to obtain sensitive information from local files.\n(CVE-2018-5107)\n\nIt was discovered that manually entered blob URLs could be accessed by\nsubsequent private browsing tabs. If a user were tricked in to entering\na blob URL, an attacker could potentially exploit this to obtain sensitive\ninformation from a private browsing context. (CVE-2018-5108)\n\nIt was discovered that dragging certain specially formatted URLs to the\naddressbar could cause the wrong URL to be displayed. If a user were\ntricked in to opening a specially crafted website and dragging a URL to\nthe addressbar, an attacker could potentially exploit this to spoof the\naddressbar contents. (CVE-2018-5111)\n\nIt was discovered that WebExtension developer tools panels could open\nnon-relative URLs. If a user were tricked in to installing a specially\ncrafted extension and running the developer tools, an attacker could\npotentially exploit this to gain additional privileges. (CVE-2018-5112)\n\nIt was discovered that ActivityStream images can attempt to load local\ncontent through file: URLs. If a user were tricked in to opening a\nspecially crafted website, an attacker could potentially exploit this in\ncombination with another vulnerability that allowed sandbox protections to\nbe bypassed, in order to obtain sensitive information from local files.\n(CVE-2018-5118)\n\nIt was discovered that the reader view will load cross-origin content in\nviolation of CORS headers. An attacker could exploit this to bypass CORS\nrestrictions. (CVE-2018-5119)\n",
  "id": "USN-3544-1",
  "modified": "2026-04-22T07:36:35Z",
  "published": "2018-01-24T20:27:56Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-3544-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5089"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5090"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5091"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5092"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5093"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5094"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5095"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5097"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5098"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5099"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5100"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5101"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5102"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5103"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5104"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5105"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5106"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5107"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5108"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5109"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5111"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5112"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5113"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5114"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5115"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5116"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5117"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5118"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5119"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-5122"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "firefox vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2018-5089",
    "UBUNTU-CVE-2018-5090",
    "UBUNTU-CVE-2018-5091",
    "UBUNTU-CVE-2018-5092",
    "UBUNTU-CVE-2018-5093",
    "UBUNTU-CVE-2018-5094",
    "UBUNTU-CVE-2018-5095",
    "UBUNTU-CVE-2018-5097",
    "UBUNTU-CVE-2018-5098",
    "UBUNTU-CVE-2018-5099",
    "UBUNTU-CVE-2018-5100",
    "UBUNTU-CVE-2018-5101",
    "UBUNTU-CVE-2018-5102",
    "UBUNTU-CVE-2018-5103",
    "UBUNTU-CVE-2018-5104",
    "UBUNTU-CVE-2018-5105",
    "UBUNTU-CVE-2018-5106",
    "UBUNTU-CVE-2018-5107",
    "UBUNTU-CVE-2018-5108",
    "UBUNTU-CVE-2018-5109",
    "UBUNTU-CVE-2018-5111",
    "UBUNTU-CVE-2018-5112",
    "UBUNTU-CVE-2018-5113",
    "UBUNTU-CVE-2018-5114",
    "UBUNTU-CVE-2018-5115",
    "UBUNTU-CVE-2018-5116",
    "UBUNTU-CVE-2018-5117",
    "UBUNTU-CVE-2018-5118",
    "UBUNTU-CVE-2018-5119",
    "UBUNTU-CVE-2018-5122"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

UBUNTU-CVE-2018-5118 (CVE-2018-5118)

CVE-2018-5118 (GCVE-0-2018-5118)

USN-3544-1 (UBUNTU-CVE-2018-5089)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour