update for CVE-2018-12402
update for CVE-2018-12402

Adding additional reporter and consequences to CVE-2018-12402 based on
bug 1447087 which was also fixed by the same underlying fix.

mozilla/foundation-security-advisories,mozilla/foundation-security-advisories