Advisories · Technology

Mozilla Thunderbird.

Every CVE that names Mozilla Thunderbird among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2018-5184 CVE record

Using remote content in encrypted messages can lead to the disclosure of plaintext.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5183 CVE record

Mozilla developers backported selected changes in the Skia library.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5178 CVE record

Mozilla Thunderbird ESR: A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript…
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5174 CVE record

Mozilla Thunderbird: In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5170 CVE record

It is possible to spoof the filename of an attachment and display an arbitrary attachment name.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5168 CVE record

Mozilla Thunderbird: Sites can bypass security checks on permissions to install lightweight themes by…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5162 CVE record

Plaintext of decrypted emails can leak through the src attribute of remote images, or links.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5161 CVE record

Crafted message headers can cause a Thunderbird process to hang on receiving the message.
- Mozilla Thunderbird ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5159 CVE record

Mozilla Thunderbird: An integer overflow can occur in the Skia library due to 32-bit integer use in an array…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5155 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur while adjusting layout during SVG animations…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5154 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur while enumerating attributes during SVG…
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5150 CVE record

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.
- Mozilla Thunderbird
- Mozilla Thunderbird ESR
Not analysed yet 11 Jun 2018
CVE-2018-5146 CVE record

Mozilla Firefox: An out of bounds memory write while processing Vorbis audio data was reported through the…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5145 CVE record

Memory safety bugs were reported in Firefox ESR 52.6.
- Mozilla Firefox ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5144 CVE record

Mozilla Firefox ESR: An integer overflow can occur during conversion of text to some Unicode character sets…
- Mozilla Firefox ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5129 CVE record

Mozilla Thunderbird: A lack of parameter validation on IPC messages results in a potential out-of-bounds write…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5127 CVE record

A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5125 CVE record

Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5117 CVE record

Mozilla Thunderbird: If right-to-left text is used in the addressbar with left-to-right alignment…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5104 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur during font face manipulation when a font face…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5103 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur during mouse event handling due to issues with…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5102 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when manipulating HTML media elements with media…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5099 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when the widget listener is holding strong…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5098 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when form input elements, focus…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5097 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur during XSL transformations when the source…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5096 CVE record

Mozilla Firefox ESR: A use-after-free vulnerability can occur while editing events in form elements on a page…
- Mozilla Firefox ESR
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2018-5095 CVE record

Mozilla Thunderbird: An integer overflow vulnerability in the Skia library when allocating memory for edge…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2018-5089 CVE record

Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7848 CVE record

RSS fields can inject new lines into the created email structure, modifying the message body.
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-7847 CVE record

Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name.
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-7846 CVE record

Mozilla Thunderbird: It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a…
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-7845 CVE record

Mozilla Thunderbird: A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7830 CVE record

The Resource Timing API incorrectly revealed navigations in cross-origin iframes.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7829 CVE record

Mozilla Thunderbird: It is possible to spoof the sender's email address and display an arbitrary sender…
- Mozilla Thunderbird
Not analysed yet 11 Jun 2018
CVE-2017-7828 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur when flushing and resizing layout because the…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7826 CVE record

Memory safety bugs were reported in Firefox 56 and Firefox ESR 52.4.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7825 CVE record

Several fonts on OS X display some Tibetan and Arabic characters as whitespace.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7824 CVE record

Mozilla Firefox: A buffer overflow occurs when drawing and validating elements with the ANGLE graphics…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7823 CVE record

Mozilla Firefox: The content security policy (CSP) "sandbox" directive did not create a unique origin for…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7819 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur in design mode when image objects are resized if…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7818 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7814 CVE record

Mozilla Firefox: File downloads encoded with "blob:" and "data:" URL elements bypassed normal file…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7810 CVE record

Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7807 CVE record

Mozilla Thunderbird: A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7805 CVE record

During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer.
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7804 CVE record

Mozilla Thunderbird: The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7803 CVE record

Mozilla Thunderbird: When a page's content security policy (CSP) header contains a "sandbox" directive…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7802 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur when manipulating the DOM during the resize…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7801 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur while re-computing layout for a "marquee"…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7800 CVE record

Mozilla Thunderbird: A use-after-free vulnerability can occur in WebSockets when the object holding the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7793 CVE record

Mozilla Firefox: A use-after-free vulnerability can occur in the Fetch API when the worker or the…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7792 CVE record

Mozilla Thunderbird: A buffer overflow will occur when viewing a certificate in the certificate manager if the…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7791 CVE record

Mozilla Thunderbird: On pages containing an iframe, the "data:" protocol can be used to create a modal alert…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7787 CVE record

Mozilla Thunderbird: Same-origin policy protections can be bypassed on pages with embedded iframes during page…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7786 CVE record

A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7785 CVE record

Mozilla Thunderbird: A buffer overflow can occur when manipulating Accessible Rich Internet Applications…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7782 CVE record

Mozilla Thunderbird: An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is…
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7779 CVE record

Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2.
- Mozilla Thunderbird
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7778 CVE record

Mozilla Firefox: A number of security vulnerabilities in the Graphite 2 library including out-of-bounds…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018
CVE-2017-7765 CVE record

Mozilla Firefox: The "Mark of the Web" was not correctly saved on Windows when files with very long names…
- Mozilla Firefox
- Mozilla Firefox ESR
Not analysed yet 11 Jun 2018