Summary
Multiple security issues were discovered in Thunderbird. If a user were
tricked in to opening a specially crafted message, an attacker could
potentially exploit these to read uninitialized memory, cause a denial of
service via application crash, or execute arbitrary code. (CVE-2017-5429,
CVE-2017-5430, CVE-2017-5436, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445,
CVE-2017-5446, CVE-2017-5447, CVE-2017-5461, CVE-2017-5467)
Multiple security issues were discovered in Thunderbird. If a user were
tricked in to opening a specially crafted website in a browsing context,
an attacker could potentially exploit these to spoof the addressbar
contents, conduct cross-site scripting (XSS) attacks, cause a denial of
service via application crash, or execute arbitrary code. (CVE-2017-5432,
CVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5437, CVE-2017-5438,
CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5449,
CVE-2017-5451, CVE-2017-5454, CVE-2017-5459, CVE-2017-5460, CVE-2017-5464,
CVE-2017-5465, CVE-2017-5466, CVE-2017-5469, CVE-2016-10195,
CVE-2016-10196, CVE-2016-10197)
A flaw was discovered in the DRBG number generation in NSS. If an
attacker were able to perform a machine-in-the-middle attack, this flaw
could potentially be exploited to view sensitive information.
(CVE-2017-5462)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | thunderbird | 1:52.1.1+build1-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | thunderbird | 1:52.1.1+build1-0ubuntu0.16.04.1 |
Vulnerabilities 33
-
Unscored —
The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via…
-
Unscored —
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows…
-
Unscored —
The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (ou…
-
Unscored —
Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bug…
-
Unscored —
Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence …
-
Unscored —
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash.…
-
Unscored —
A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are d…
-
Unscored —
A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash.…
-
Unscored —
A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This…
-
Unscored —
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a …
-
Unscored —CVE-2017-5437 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197. Reason: This candidate is…
-
Unscored —
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during ha…
-
Unscored —
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a po…
-
Unscored —
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching wh…
-
Unscored —
A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable…
-
Unscored —
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially ex…
-
Unscored —
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affect…
-
Unscored —
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains i…
-
Unscored —
A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to cre…
-
Unscored —
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This lead…
-
Unscored —
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitab…
-
Unscored —
A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS…
-
Unscored —
A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event co…
-
Unscored —
A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files th…
-
Unscored —
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability…
-
Unscored —
A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presse…
-
Unscored —
Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3…
-
Unscored —
A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not…
-
Unscored —
During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessi…
-
Unscored —
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for othe…
-
Unscored —
If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, trigge…
-
Unscored —
A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clippin…
-
Unscored —
Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affec…
References
-
report
https://ubuntu.com/security/CVE-2016-10195
-
report
https://ubuntu.com/security/CVE-2016-10196
-
report
https://ubuntu.com/security/CVE-2016-10197
-
report
https://ubuntu.com/security/CVE-2017-5429
-
report
https://ubuntu.com/security/CVE-2017-5430
-
report
https://ubuntu.com/security/CVE-2017-5432
-
report
https://ubuntu.com/security/CVE-2017-5433
-
report
https://ubuntu.com/security/CVE-2017-5434
-
report
https://ubuntu.com/security/CVE-2017-5435
-
report
https://ubuntu.com/security/CVE-2017-5436
-
report
https://ubuntu.com/security/CVE-2017-5437
-
report
https://ubuntu.com/security/CVE-2017-5438
-
report
https://ubuntu.com/security/CVE-2017-5439
-
report
https://ubuntu.com/security/CVE-2017-5440
-
report
https://ubuntu.com/security/CVE-2017-5441
-
report
https://ubuntu.com/security/CVE-2017-5442
-
report
https://ubuntu.com/security/CVE-2017-5443
-
report
https://ubuntu.com/security/CVE-2017-5444
-
report
https://ubuntu.com/security/CVE-2017-5445
-
report
https://ubuntu.com/security/CVE-2017-5446
-
report
https://ubuntu.com/security/CVE-2017-5447
-
report
https://ubuntu.com/security/CVE-2017-5449
-
report
https://ubuntu.com/security/CVE-2017-5451
-
report
https://ubuntu.com/security/CVE-2017-5454
-
report
https://ubuntu.com/security/CVE-2017-5459
-
report
https://ubuntu.com/security/CVE-2017-5460
-
report
https://ubuntu.com/security/CVE-2017-5461
-
report
https://ubuntu.com/security/CVE-2017-5462
-
report
https://ubuntu.com/security/CVE-2017-5464
-
report
https://ubuntu.com/security/CVE-2017-5465
-
report
https://ubuntu.com/security/CVE-2017-5466
-
report
https://ubuntu.com/security/CVE-2017-5467
-
report
https://ubuntu.com/security/CVE-2017-5469