Vulnerabilities > CVE-2018-12292 - Use After Free vulnerability in Palemoon Pale Moon

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

palemoon

CWE-416

exploit available

NVD

Published: 2018-06-13

Updated: 2018-08-11

Summary

A use-after-free vulnerability exists in DOMProxyHandler::EnsureExpandoObject in Pale Moon before 27.9.3.

Vulnerable Configurations

Part	Description	Count
Application	Palemoon Palemoon Pale Moon 4.0 Palemoon Pale Moon 4.0.3 Palemoon Pale Moon 4.0.5 Palemoon Pale Moon 4.0.6 Palemoon Pale Moon 4.0.7 Palemoon Pale Moon 5.0 Palemoon Pale Moon 6.0 Palemoon Pale Moon 6.0.2 Palemoon Pale Moon 7.0 Palemoon Pale Moon 7.0.1 Palemoon Pale Moon 9.0 Palemoon Pale Moon 9.0.1 Palemoon Pale Moon 9.1 Palemoon Pale Moon 9.2 Palemoon Pale Moon 11.0 Palemoon Pale Moon 11.0.1 Palemoon Pale Moon 12.0 Palemoon Pale Moon 12.1 Palemoon Pale Moon 12.2 Palemoon Pale Moon 12.2.1 Palemoon Pale Moon 12.3 Palemoon Pale Moon 15.0 Palemoon Pale Moon 15.1 Palemoon Pale Moon 15.1.1 Palemoon Pale Moon 15.2 Palemoon Pale Moon 15.2.1 Palemoon Pale Moon 15.3 Palemoon Pale Moon 15.3.1 Palemoon Pale Moon 15.3.2 Palemoon Pale Moon 15.4 Palemoon Pale Moon 15.4.1 Palemoon Pale Moon 19.0 Palemoon Pale Moon 19.0.1 Palemoon Pale Moon 19.0.2 Palemoon Pale Moon 20.0.1 Palemoon Pale Moon 20.1 Palemoon Pale Moon 20.2 Palemoon Pale Moon 20.2.1 Palemoon Pale Moon 20.3 Palemoon Pale Moon 24.0 Palemoon Pale Moon 24.0.1 Palemoon Pale Moon 24.0.2 Palemoon Pale Moon 24.1.0 Palemoon Pale Moon 24.1.1 Palemoon Pale Moon 24.1.2 Palemoon Pale Moon 24.2.0 Palemoon Pale Moon 24.2.1 Palemoon Pale Moon 24.2.2 Palemoon Pale Moon 24.3.0 Palemoon Pale Moon 24.3.1 Palemoon Pale Moon 24.3.2 Palemoon Pale Moon 24.4.0 Palemoon Pale Moon 24.4.1 Palemoon Pale Moon 24.4.2 Palemoon Pale Moon 24.5.0 Palemoon Pale Moon 24.6.0 Palemoon Pale Moon 24.6.1 Palemoon Pale Moon 24.6.2 Palemoon Pale Moon 24.7.0 Palemoon Pale Moon 24.7.1 Palemoon Pale Moon 24.7.2 Palemoon Pale Moon 25.0.0 Palemoon Pale Moon 25.0.1 Palemoon Pale Moon 25.0.2 Palemoon Pale Moon 25.1.0 Palemoon Pale Moon 25.1.1 Palemoon Pale Moon 25.2.0. Palemoon Pale Moon 25.2.1 Palemoon Pale Moon 25.3.0 Palemoon Pale Moon 25.3.1 Palemoon Pale Moon 25.3.2 Palemoon Pale Moon 25.4.0 Palemoon Pale Moon 25.4.1 Palemoon Pale Moon 25.5.0 Palemoon Pale Moon 25.6.0 Palemoon Pale Moon 25.7.0 Palemoon Pale Moon 25.7.1 Palemoon Pale Moon 25.7.2 Palemoon Pale Moon 25.7.3 Palemoon Pale Moon 25.7.3.1 Palemoon Pale Moon 25.8.0 Palemoon Pale Moon 25.8.1 Palemoon Pale Moon 26.0.0 Palemoon Pale Moon 26.0.1 Palemoon Pale Moon 26.0.2 Palemoon Pale Moon 26.0.3 Palemoon Pale Moon 26.1.0 Palemoon Pale Moon 26.1.1 Palemoon Pale Moon 26.2.0 Palemoon Pale Moon 26.2.1 Palemoon Pale Moon 26.2.2 Palemoon Pale Moon 26.3.0 Palemoon Pale Moon 26.3.1 Palemoon Pale Moon 26.3.2 Palemoon Pale Moon 26.3.3 Palemoon Pale Moon 26.4.0 Palemoon Pale Moon 26.4.0.1 Palemoon Pale Moon 26.4.1 Palemoon Pale Moon 26.5.0 Palemoon Pale Moon 27.0.0 Palemoon Pale Moon 27.0.1 Palemoon Pale Moon 27.0.2 Palemoon Pale Moon 27.0.3 Palemoon Pale Moon 27.1.0 Palemoon Pale Moon 27.1.1 Palemoon Pale Moon 27.1.2 Palemoon Pale Moon 27.2.0 Palemoon Pale Moon 27.2.1 Palemoon Pale Moon 27.3.0 Palemoon Pale Moon 27.4.0 Palemoon Pale Moon 27.4.1 Palemoon Pale Moon 27.4.2 Palemoon Pale Moon 27.4.2.1 Palemoon Pale Moon 27.5.0 Palemoon Pale Moon 27.5.1 Palemoon Pale Moon 27.6.0 Palemoon Pale Moon 27.6.1 Palemoon Pale Moon 27.6.2 Palemoon Pale Moon 27.7.0 Palemoon Pale Moon 27.7.1 Palemoon Pale Moon 27.7.2 Palemoon Pale Moon 27.8.0 Palemoon Pale Moon 27.8.1 Palemoon Pale Moon 27.8.2 Palemoon Pale Moon 27.8.3 Palemoon Pale Moon 27.9.0 Palemoon Pale Moon 27.9.1 Palemoon Pale Moon 27.9.2	129

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Exploit-Db

description	Pale Moon Browser < 27.9.3 - Use After Free (PoC). CVE-2018-12292. Local exploit for Windows platform
file	exploits/windows/local/44900.txt
id	EDB-ID:44900
last seen	2018-06-18
modified	2018-06-18
platform	windows
port
published	2018-06-18
reporter	Exploit-DB
source	https://www.exploit-db.com/download/44900/
title	Pale Moon Browser < 27.9.3 - Use After Free (PoC)
type	local

Packetstorm

data source	https://packetstormsecurity.com/files/download/148228/palemoonbrowser-uaf.txt
id	PACKETSTORM:148228
last seen	2018-06-19
published	2018-06-18
reporter	Berk Cem Goksel
source	https://packetstormsecurity.com/files/148228/Pale-Moon-Browser-Use-After-Free.html
title	Pale Moon Browser Use-After-Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Exploit-Db

Packetstorm

References