Summary
Multiple security issues were discovered in Thunderbird. If a user were
tricked in to opening a specially crafted website in a browsing context,
an attacker could potentially exploit these to bypass same-origin
restrictions, bypass CSP restrictions, obtain sensitive information, spoof
the origin of modal alerts, cause a denial of service via application
crash, or execute arbitrary code. (CVE-2017-7753, CVE-2017-7779,
CVE-2017-7784, CVE-2017-7785, CVE-2017-7787, CVE-2017-7791, CVE-2017-7792,
CVE-2017-7800, CVE-2017-7801, CVE-2017-7802, CVE-2017-7803, CVE-2017-7807,
CVE-2017-7809)
A buffer overflow was discovered when displaying SVG content in some
circumstances. If a user were tricked in to opening a specially crafted
message, an attacker could potentially exploit this to cause a denial of
service via application crash, or execute arbitrary code. (CVE-2017-7786)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | thunderbird | 1:52.3.0+build1-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | thunderbird | 1:52.3.0+build1-0ubuntu0.16.04.1 |
Vulnerabilities 14
-
Unscored —
An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style dat…
-
Unscored —
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evide…
-
Unscored —
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer …
-
Unscored —
A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. T…
-
Unscored —
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a p…
-
Unscored —
Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes…
-
Unscored —
On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary…
-
Unscored —
A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely …
-
Unscored —
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disco…
-
Unscored —
A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where…
-
Unscored —
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If thes…
-
Unscored —
When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This r…
-
Unscored —
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the d…
-
Unscored —
A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while sti…
References
-
report
https://ubuntu.com/security/CVE-2017-7753
-
report
https://ubuntu.com/security/CVE-2017-7779
-
report
https://ubuntu.com/security/CVE-2017-7784
-
report
https://ubuntu.com/security/CVE-2017-7785
-
report
https://ubuntu.com/security/CVE-2017-7786
-
report
https://ubuntu.com/security/CVE-2017-7787
-
report
https://ubuntu.com/security/CVE-2017-7791
-
report
https://ubuntu.com/security/CVE-2017-7792
-
report
https://ubuntu.com/security/CVE-2017-7800
-
report
https://ubuntu.com/security/CVE-2017-7801
-
report
https://ubuntu.com/security/CVE-2017-7802
-
report
https://ubuntu.com/security/CVE-2017-7803
-
report
https://ubuntu.com/security/CVE-2017-7807
-
report
https://ubuntu.com/security/CVE-2017-7809