<commit_before>## mfsa2018-30.yml
announced: December 11, 2018
impact: critical
fixed_in:
- Firefox ESR 60.4
title: Security vulnerabilities fixed in Firefox ESR 60.4
advisories:
  CVE-2018-17466:
    title: Buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11
    impact: high
    reporter: Omair
    description: |
      A buffer overflow and out-of-bounds read can occur in <code>TextureStorage11</code> within the ANGLE graphics library, used for WebGL content. This results in a potentially exploitable crash.
    bugs:
      - url: 1488295
  CVE-2018-18492:
    title: Use-after-free with select element
    impact: high
    reporter: Nils
    description: |
      A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the <code>select</code> element in the <code>options</code> collection. This results in a potentially exploitable crash.
    bugs:
      - url: 1499861
  CVE-2018-18493:
    title: Buffer overflow in accelerated 2D canvas with Skia
    impact: high
    reporter: <NAME>
    description: |
      A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash.
    bugs:
      - url: 1504452
  CVE-2018-18494:
    title: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs
    impact: high
    reporter: <NAME> of Kryptos Logic
    description: |
      A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript <code>location</code> property to cause a redirection to another site using <code>performance.getEntries()</code>. This is a same-origin policy violation and could allow for data theft. 
    bugs:
      - url: 1487964
  CVE-2018-18498:
    title: Integer overflow when calculating buffer sizes for images
    impact: low
    reporter: R at Zero Day LLC
    description: |
      A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write. <commit_msg>Added reporter's handle at their request.<commit_after>## mfsa2018-30.yml
announced: December 11, 2018
impact: critical
fixed_in:
- Firefox ESR 60.4
title: Security vulnerabilities fixed in Firefox ESR 60.4
advisories:
  CVE-2018-17466:
    title: Buffer overflow and out-of-bounds read in ANGLE library with TextureStorage11
    impact: high
    reporter: Omair
    description: |
      A buffer overflow and out-of-bounds read can occur in <code>TextureStorage11</code> within the ANGLE graphics library, used for WebGL content. This results in a potentially exploitable crash.
    bugs:
      - url: 1488295
  CVE-2018-18492:
    title: Use-after-free with select element
    impact: high
    reporter: Nils
    description: |
      A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the <code>select</code> element in the <code>options</code> collection. This results in a potentially exploitable crash.
    bugs:
      - url: 1499861
  CVE-2018-18493:
    title: Buffer overflow in accelerated 2D canvas with Skia
    impact: high
    reporter: <NAME>
    description: |
      A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash.
    bugs:
      - url: 1504452
  CVE-2018-18494:
    title: Same-origin policy violation using location attribute and performance.getEntries to steal cross-origin URLs
    impact: high
    reporter: <NAME> (@Windowsrcer) of Kryptos Logic
    description: |
      A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript <code>location</code> property to cause a redirection to another site using <code>performance.getEntries()</code>. This is a same-origin policy violation and could allow for data theft. 
    bugs:
      - url: 1487964
  CVE-2018-18498:
    title: Integer overflow when calculating buffer sizes for images
    impact: low
    reporter: R at Zero Day LLC
    description: |
      A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value. This leads to a possible out-of-bounds write. 
{'fraction_non_alphanumeric': 0.05716148663334058, 'fraction_numerical': 0.043903499239295804, 'mean_word_length': 3.520628683693517, 'pattern_counts': {'":': 0, '<': 27, '<?xml version=': 0, '>': 27, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '3802890', 'n_tokens_mistral': 1360, 'n_tokens_neox': 1180, 'n_words': 568}