Summary
Multiple security issues were discovered in Thunderbird. If a user were
tricked in to opening a specially crafted website in a browsing context,
an attacker could potentially exploit these to cause a denial of service,
or execute arbitrary code. (CVE-2018-5125, CVE-2018-5127, CVE-2018-5129,
CVE-2018-5144, CVE-2018-5145, CVE-2018-5146)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | thunderbird | 1:52.7.0+build1-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | thunderbird | 1:52.7.0+build1-0ubuntu0.16.04.1 |
Vulnerabilities 6
-
Unscored —
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corru…
-
Unscored —
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potential…
-
Unscored —
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC message…
-
Unscored —
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length param…
-
Unscored —
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume th…
-
Unscored —
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnera…