Red Hat Security AdvisoryRHSA-2018:0648
thunderbird security update
Released 2018-04-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) thunderbird-52.7.0-1.el7_4
- Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-52.7.0-1.el7_4
- Red Hat Enterprise Linux Workstation (v. 7) thunderbird-52.7.0-1.el7_4
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) thunderbird-52.7.0-1.el7_4
Fixes 6 records
Priority MEDIUM 52
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.11905 · Published 2018-06-11 · Partial fix · 59.0.1, 52.7.2 +1 CWE-787
Priority MEDIUM 49
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.07832 · Published 2018-06-11 · Fixed in 52.7, 59 CWE-119
Priority MEDIUM 47
Memory safety bugs were reported in Firefox ESR 52.6.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02964 · Published 2018-06-11 · Fixed in 52.7 CWE-119
Priority MEDIUM 43
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages.
CVSS 3.0HIGH 8.6· Network · No auth · No interaction · EPSS 0.03037 · Published 2018-06-11 · Fixed in 52.7, 59 CWE-787
Priority MEDIUM 43
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.02478 · Published 2018-06-11 · Fixed in 52.7, 59 CWE-119
Priority LOW 38
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter.
CVSS 3.0HIGH 7.3· Network · No auth · No interaction · EPSS 0.03198 · Published 2018-06-11 · Fixed in 52.7 CWE-190