Summary
Multiple security issues were discovered in Thunderbird. If a user were
tricked in to opening a specially crafted website in a browsing context,
an attacker could potentially exploit these to cause a denial of service,
bypass CORS restrictions, obtain sensitive information, or execute
arbitrary code. (CVE-2018-12359, CVE-2018-12360, CVE-2018-12362,
CVE-2018-12363, CVE-2018-12364, CVE-2018-12365, CVE-2018-12366)
It was discovered that S/MIME and PGP decryption oracles can be built with
HTML emails. An attacker could potentially exploit this to obtain
sensitive information. (CVE-2018-12372)
It was discovered that S/MIME plaintext can be leaked through HTML
reply/forward. An attacker could potentially exploit this to obtain
sensitive information. (CVE-2018-12373)
It was discovered that forms can be used to exfiltrate encrypted mail
parts by pressing enter in a form field. An attacker could potentially
exploit this to obtain sensitive information. (CVE-2018-12374)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | thunderbird | 1:52.9.1+build3-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | thunderbird | 1:52.9.1+build3-0ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | thunderbird | 1:52.9.1+build3-0ubuntu0.18.04.1 |
Vulnerabilities 11
-
Unscored —
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dy…
-
Unscored —
A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by fo…
-
Unscored —
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) s…
-
Unscored —
A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resultin…
-
Unscored —
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin P…
-
Unscored —
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system…
-
Unscored —
An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a …
-
Unscored —
Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply…
-
Unscored —
dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forw…
-
Unscored —
Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text …
-
Unscored —
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of m…
References
-
report
https://ubuntu.com/security/CVE-2018-5188
-
report
https://ubuntu.com/security/CVE-2018-12359
-
report
https://ubuntu.com/security/CVE-2018-12360
-
report
https://ubuntu.com/security/CVE-2018-12362
-
report
https://ubuntu.com/security/CVE-2018-12363
-
report
https://ubuntu.com/security/CVE-2018-12364
-
report
https://ubuntu.com/security/CVE-2018-12365
-
report
https://ubuntu.com/security/CVE-2018-12366
-
report
https://ubuntu.com/security/CVE-2018-12372
-
report
https://ubuntu.com/security/CVE-2018-12373
-
report
https://ubuntu.com/security/CVE-2018-12374