CVE-2018-12385 : What You Need to Know

A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache or from locally installed malware. This issue also triggers a non-exploitable startup crash for users switching between the Nightly and Release versions of Firefox if the same profile is used. This vulnerability affects Thunderbird < 60.2.1, Firefox ESR < 60.2.1, and Firefox < 62.0.2.

Understanding CVE-2018-12385

This CVE involves a crash in TransportSecurityInfo due to cached data.

What is CVE-2018-12385?

The vulnerability allows for a crash in TransportSecurityInfo due to data stored in the local cache, impacting Thunderbird, Firefox ESR, and Firefox.

The Impact of CVE-2018-12385

The vulnerability can lead to a crash in SSL functionality, potentially triggered by malicious data stored in the local cache.

Technical Details of CVE-2018-12385

This section provides more technical insights into the CVE.

Vulnerability Description

The issue arises from a crash in TransportSecurityInfo due to cached data.

Affected Systems and Versions

Thunderbird versions prior to 60.2.1
Firefox ESR versions prior to 60.2.1
Firefox versions prior to 62.0.2

Exploitation Mechanism

Requires another vulnerability allowing data writing into the local cache or locally installed malware.
Triggers a non-exploitable startup crash for users switching between Nightly and Release versions.

Mitigation and Prevention

Protecting systems from the CVE is crucial.

Immediate Steps to Take

Update Thunderbird, Firefox ESR, and Firefox to versions 60.2.1 and 62.0.2, respectively.
Implement security measures to prevent unauthorized data writing into the local cache.

Long-Term Security Practices

Regularly update software to patch known vulnerabilities.
Educate users on safe browsing practices and avoiding malware.

Patching and Updates

Stay informed about security advisories and apply patches promptly.