Advisories · Technology

Mozilla Thunderbird.

Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2017-7764 CVE record

Mozilla Firefox: Characters from the "Canadian Syllabics" unicode block can be mixed with characters from…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7763 CVE record

Default fonts on OS X display some Tibetan characters as whitespace.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7758 CVE record

Mozilla Firefox: An out-of-bounds read vulnerability with the Opus encoder when the number of channels in…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7757 CVE record

Mozilla Firefox: A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7756 CVE record

Mozilla Firefox: A use-after-free and use-after-scope vulnerability when logging errors from headers for…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7755 CVE record

Mozilla Firefox: The Firefox installer on Windows can be made to load malicious DLL files stored in the…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7754 CVE record

Mozilla Firefox: An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7753 CVE record

Mozilla Thunderbird: An out-of-bounds read occurs when applying style rules to pseudo-elements…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7752 CVE record

Mozilla Firefox: A use-after-free vulnerability during specific user interactions with the input method…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7751 CVE record

Mozilla Firefox: A use-after-free vulnerability with content viewer listeners that results in a…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7750 CVE record

Mozilla Firefox: A use-after-free vulnerability during video control operations when a "<track>" element…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7749 CVE record

A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5472 CVE record

Mozilla Firefox: A use-after-free vulnerability with the frameloader during tree reconstruction while…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5470 CVE record

Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5469 CVE record

Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5467 CVE record

Mozilla Thunderbird: A potential memory corruption and crash when using Skia content when drawing content…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5466 CVE record

Mozilla Thunderbird: If a page is loaded from an original site through a hyperlink and contains a redirect to…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5465 CVE record

An out-of-bounds read while processing SVG content in "ConvolvePixel".
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5464 CVE record

Mozilla Thunderbird: During DOM manipulations of the accessibility tree through script…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5462 CVE record

Mozilla Thunderbird: A flaw in DRBG number generation within the Network Security Services (NSS) library where…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5460 CVE record

Mozilla Thunderbird: A use-after-free vulnerability in frame selection triggered by a combination of malicious…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5459 CVE record

A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5454 CVE record

Mozilla Thunderbird: A mechanism to bypass file system access protections in the sandbox to use the file…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5451 CVE record

Mozilla Thunderbird: A mechanism to spoof the addressbar through the user interaction on the addressbar and…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5449 CVE record

Mozilla Thunderbird: A possibly exploitable crash triggered during layout and manipulation of bidirectional…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5447 CVE record

An out-of-bounds read during the processing of glyph widths during text layout.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5446 CVE record

Mozilla Thunderbird: An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5445 CVE record

Mozilla Thunderbird: A vulnerability while parsing "application/http-index-format" format content where…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5444 CVE record

Mozilla Thunderbird: A buffer overflow vulnerability while parsing "application/http-index-format" format…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5443 CVE record

An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5442 CVE record

A use-after-free vulnerability during changes in style when manipulating DOM elements.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5441 CVE record

A use-after-free vulnerability when holding a selection during scroll events.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5440 CVE record

Mozilla Thunderbird: A use-after-free vulnerability during XSLT processing due to a failure to propagate error…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5439 CVE record

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5438 CVE record

Mozilla Thunderbird: A use-after-free vulnerability during XSLT processing due to the result handler being…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5436 CVE record

An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5435 CVE record

Mozilla Thunderbird: A use-after-free vulnerability occurs during transaction processing in the editor during…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5434 CVE record

Mozilla Thunderbird: A use-after-free vulnerability occurs when redirecting focus handling which results in a…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5433 CVE record

Mozilla Thunderbird: A use-after-free vulnerability in SMIL animation functions occurs when pointers to…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5432 CVE record

Mozilla Thunderbird: A use-after-free vulnerability occurs during certain text input selection resulting in a…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5430 CVE record

Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5429 CVE record

Mozilla Thunderbird: Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5426 CVE record

Mozilla Firefox: On Linux, if the secure computing mode BPF (seccomp-bpf) filter is running when the Gecko…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5425 CVE record

The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions.
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5422 CVE record

Mozilla Firefox: If a malicious site uses the "view-source:" protocol in a series within a single…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5421 CVE record

Mozilla Firefox: A malicious site could spoof the contents of the print preview window if popup windows…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5419 CVE record

Mozilla Firefox: If a malicious site repeatedly triggers a modal authentication prompt…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5418 CVE record

Mozilla Firefox: An out of bounds read error occurs when parsing some HTTP digest authorization responses…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5416 CVE record

In certain circumstances a networking event listener can be prematurely released.
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5414 CVE record

The file picker dialog can choose and display the wrong local default directory when instantiated.
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5413 CVE record

A segmentation fault can occur during some bidirectional layout operations.
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5412 CVE record

A buffer overflow read during SVG filter color value operations, resulting in data exposure.
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5411 CVE record

Mozilla Firefox: A use-after-free can occur during buffer storage operations within the ANGLE graphics…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5410 CVE record

Mozilla Firefox: Memory corruption resulting in a potentially exploitable crash during garbage collection…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5408 CVE record

Mozilla Firefox: Video files loaded video captions cross-origin without checking for the presence of CORS…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5407 CVE record

Mozilla Firefox: Using SVG filters that don't use the fixed point math implementation on a target iframe…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5406 CVE record

Mozilla Firefox: A segmentation fault can occur in the Skia graphics library during some canvas operations…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-5405 CVE record

Mozilla Firefox: Certain response codes in FTP connections can result in the use of uninitialized values…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5404 CVE record

Mozilla Firefox: A use-after-free error can occur when manipulating ranges in selections with one node…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-5403 CVE record

Mozilla Firefox: When adding a range to an object in the DOM…
- Mozilla Firefox
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018