ID:6353 - Exploit for Use-after-free error in Pale Moon - CVE-2018-12292

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.

The weakness exists due to use-after-free error in DOMProxyHandler::EnsureExpandoObject. A remote unauthenticated attacker can trigger memory corruption and cause the service to crash or execute arbitrary code with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Remediation