Advisories · Technology

Mozilla Thunderbird ESR.

Every CVE that names Mozilla Thunderbird ESR among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-5185 CVE record

Plaintext of decrypted emails can leak through by user submitting an embedded form.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5184 CVE record

Using remote content in encrypted messages can lead to the disclosure of plaintext.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5183 CVE record

Mozilla developers backported selected changes in the Skia library.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5178 CVE record

Mozilla Thunderbird ESR: A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript…
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5174 CVE record

Mozilla Thunderbird: In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5170 CVE record

It is possible to spoof the filename of an attachment and display an arbitrary attachment name.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5168 CVE record

Mozilla Thunderbird: Sites can bypass security checks on permissions to install lightweight themes by…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5162 CVE record

Plaintext of decrypted emails can leak through the src attribute of remote images, or links.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5161 CVE record

Crafted message headers can cause a Thunderbird process to hang on receiving the message.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5159 CVE record

Mozilla Thunderbird: An integer overflow can occur in the Skia library due to 32-bit integer use in an array…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5155 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur while adjusting layout during SVG animations…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5154 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur while enumerating attributes during SVG…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5150 CVE record

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018