Read the docs
Red Hat Security Advisory

RHSA-2018:0648

thunderbird security update

Released 2018-04-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

TI-2018-03711 CVE-2018-5146 · GHSA-qxgw-7whg-72j2

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 52

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.11905 Published 2018-06-11 Partial fix · 59.0.1, 52.7.2 +1 CWE-787
TI-2018-03693 CVE-2018-5127 · GHSA-669j-hvf3-2f28

Memory corruption in Mozilla Thunderbird

Priority MEDIUM 49

A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.07832 Published 2018-06-11 Fixed in 52.7, 59 CWE-119
TI-2018-03710 CVE-2018-5145 · GHSA-576m-x596-j6g4

Memory corruption in Mozilla Firefox ESR

Priority MEDIUM 47

Memory safety bugs were reported in Firefox ESR 52.6.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02964 Published 2018-06-11 Fixed in 52.7 CWE-119
TI-2018-03695 CVE-2018-5129 · GHSA-x4cw-r9m3-pj4c

Out-of-bounds write in Mozilla Thunderbird

Priority MEDIUM 43

A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.03037 Published 2018-06-11 Fixed in 52.7, 59 CWE-787
TI-2018-03691 CVE-2018-5125 · GHSA-32j6-x4jq-jq3x

Memory corruption in Mozilla Thunderbird

Priority MEDIUM 43

Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02478 Published 2018-06-11 Fixed in 52.7, 59 CWE-119
TI-2018-03709 CVE-2018-5144 · GHSA-4xfj-vf8f-vwpp

Integer overflow in Mozilla Firefox ESR

Priority LOW 38

An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter.

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.03198 Published 2018-06-11 Fixed in 52.7 CWE-190