icedove - security update

Fixed packages 1

Vulnerabilities 7

• High 7.5
  CVE-2016-9079 Exploited Public exploit EPSS 87%

  A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been di…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018

  KEV Jun 22, 2023
• Unscored —
  CVE-2016-5290

  Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4. Some of these bugs showed evidence of memory corru…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2016-5291

  A same-origin policy bypass with local shortcut files to load arbitrary local content from disk. This vulnerability aff…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2016-5296

  A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2016-5297

  An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking iss…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2016-9066 Public exploit EPSS 12%

  A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amou…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018
• Unscored —
  CVE-2016-9074

  An existing mitigation of timing side-channel attacks is insufficient in some circumstances. This issue is addressed in…

  Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu
  Jun 11, 2018