RHSA-2017:1201 — Red Hat Security Advisory: thunderbird security update

Fixed packages 12

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	thunderbird	0:52.1.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::client	thunderbird-debuginfo	0:52.1.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::server	thunderbird	0:52.1.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::server	thunderbird-debuginfo	0:52.1.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::workstation	thunderbird	0:52.1.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::workstation	thunderbird-debuginfo	0:52.1.0-1.el6_9
Red Hat · RHEL 7 enterprise_linux:7::client	thunderbird	0:52.1.0-1.el7_3
Red Hat · RHEL 7 enterprise_linux:7::client	thunderbird-debuginfo	0:52.1.0-1.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server	thunderbird	0:52.1.0-1.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server	thunderbird-debuginfo	0:52.1.0-1.el7_3
Red Hat · RHEL 7 enterprise_linux:7::workstation	thunderbird	0:52.1.0-1.el7_3
Red Hat · RHEL 7 enterprise_linux:7::workstation	thunderbird-debuginfo	0:52.1.0-1.el7_3

Vulnerabilities 29

Unscored —

CVE-2016-10195

The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via…

thunderbird firefox libevent libevent Debian Ubuntu Alpine

Mar 15, 2017
Unscored —

CVE-2016-10196

Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows…

thunderbird firefox libevent libevent Debian Ubuntu Alpine

Mar 15, 2017
Unscored —

CVE-2016-10197

The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (ou…

thunderbird firefox libevent libevent Debian Ubuntu Alpine

Mar 15, 2017
Unscored —

CVE-2017-5429

Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bug…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5432

A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash.…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5433

A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are d…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5434

A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash.…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5435

A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5436

An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5438

A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during ha…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5439

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a po…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5440

A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching wh…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5441

A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5442

A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially ex…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5443

An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affect…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5444

A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains i…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5445

A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to cre…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5446

An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This lead…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5447 Public exploit EPSS 17%

An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitab…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5449

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS…

Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5451

A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event co…

Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5454

A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files th…

Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5459

A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5460

A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presse…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5464

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessi…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5465 Public exploit EPSS 18%

An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for othe…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5466

If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, trigge…

Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5467

A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clippin…

Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5469

Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affec…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-13
report
https://bugzilla.redhat.com/show_bug.cgi?id=1418608
report
https://bugzilla.redhat.com/show_bug.cgi?id=1418611
report
https://bugzilla.redhat.com/show_bug.cgi?id=1418612
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443298
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443299
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443301
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443303
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443304
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443305
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443307
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443308
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443311
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443312
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443313
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443314
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443315
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443317
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443322
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443323
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443324
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443325
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443327
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443328
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443329
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443330
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443332
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443333
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443338
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443340
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1201.json
report
https://access.redhat.com/security/cve/CVE-2016-10195
advisory
https://www.cve.org/CVERecord?id=CVE-2016-10195
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-10195
report
https://access.redhat.com/security/cve/CVE-2016-10196
advisory
https://www.cve.org/CVERecord?id=CVE-2016-10196
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-10196
report
https://access.redhat.com/security/cve/CVE-2016-10197

Red Hat Security Advisory: thunderbird security update

Fixed packages 12

Vulnerabilities 29

The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via…

Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows…

The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (ou…

Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bug…

A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash.…

A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are d…

A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash.…

A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This…

An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a …

A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during ha…

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a po…

A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching wh…

A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable…

A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially ex…

An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affect…

A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains i…

A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to cre…

An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This lead…

An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitab…

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS…

A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event co…

A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files th…

A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability…

A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presse…

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessi…

An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for othe…

If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, trigge…

A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clippin…

Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affec…

References