TI-2018-03693 CVE-2018-5127 · GHSA-669j-hvf3-2f28
Memory corruption in Mozilla Thunderbird
Priority MEDIUM 49
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script.
RHSA-2018:0527
firefox security update
Released 2018-03-15 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) firefox-52.7.0-1.el7_4
- Red Hat Enterprise Linux Client Optional (v. 7) firefox-52.7.0-1.el7_4
- Red Hat Enterprise Linux Server (v. 7) firefox-52.7.0-1.el7_4
- Red Hat Enterprise Linux Server Optional (v. 7) firefox-52.7.0-1.el7_4, firefox-52.7.0-1.el7_4.ppc
- Red Hat Enterprise Linux Workstation (v. 7) firefox-52.7.0-1.el7_4
- Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-52.7.0-1.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) firefox-52.7.0-1.el7_4
Fixes 7 records
TI-2018-03710 CVE-2018-5145 · GHSA-576m-x596-j6g4
Memory corruption in Mozilla Firefox ESR
Priority MEDIUM 47
Memory safety bugs were reported in Firefox ESR 52.6.
TI-2018-03696 CVE-2018-5130 · GHSA-w9cf-85vm-mch5
Improper input validation in Mozilla Firefox ESR
Priority MEDIUM 43
When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered.
TI-2018-03695 CVE-2018-5129 · GHSA-x4cw-r9m3-pj4c
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 43
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages.
TI-2018-03691 CVE-2018-5125 · GHSA-32j6-x4jq-jq3x
Memory corruption in Mozilla Thunderbird
Priority MEDIUM 43
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6.
TI-2018-03709 CVE-2018-5144 · GHSA-4xfj-vf8f-vwpp
Integer overflow in Mozilla Firefox ESR
Priority LOW 38
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter.
TI-2018-03697 CVE-2018-5131 · GHSA-hf84-87fj-v8xv
Information disclosure in Mozilla Firefox ESR
Priority LOW 31
Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should.