TI-2017-05441 CVE-2017-7824 · GHSA-gvp7-j4mc-vqc9
Memory corruption in Mozilla Firefox
Priority MEDIUM 48
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content.
RHSA-2017:2885
thunderbird security update
Released 2017-10-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) thunderbird-52.4.0-2.el7_4
- Red Hat Enterprise Linux Desktop (v. 6) thunderbird-52.4.0-2.el6_9
- Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-52.4.0-2.el6_9
- Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-52.4.0-2.el7_4
- Red Hat Enterprise Linux Workstation (v. 6) thunderbird-52.4.0-2.el6_9
- Red Hat Enterprise Linux Workstation (v. 7) thunderbird-52.4.0-2.el7_4
Fixes 7 records
TI-2017-05436 CVE-2017-7819 · GHSA-crj5-jxxg-27p8
Use after free in Mozilla Firefox
Priority MEDIUM 48
A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during the resizing have been freed from memory.
TI-2017-05435 CVE-2017-7818 · GHSA-9m9q-2r2h-7j8v
Use after free in Mozilla Firefox
Priority MEDIUM 48
A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) elements within containers through the DOM.
TI-2017-05427 CVE-2017-7810 · GHSA-65vv-2r24-pjcx
Memory corruption in Mozilla Firefox
Priority MEDIUM 47
Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3.
TI-2017-05411 CVE-2017-7793 · GHSA-56mj-fm7c-959m
Use after free in Mozilla Firefox
Priority MEDIUM 46
A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when still in use, resulting in a potentially exploitable crash.
TI-2017-05431 CVE-2017-7814 · GHSA-95j8-9fpj-7wc6
Improper input validation in Mozilla Firefox
Priority LOW 36
File downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks though the Phishing and Malware Protection feature and its block lists of suspicious sites and files.
TI-2017-05440 CVE-2017-7823 · GHSA-hhcx-w758-8p3p
Cross-site scripting in Mozilla Firefox
Priority LOW 27
The content security policy (CSP) "sandbox" directive did not create a unique origin for the document, causing it to behave as if the "allow-same-origin" keyword were always specified.