Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Mozilla Thunderbird — RHSA-2016:2780 Clear all filters
TI-2016-07420 CVE-2016-9066 · GHSA-m65c-6q88-9x7g

Memory corruption in Mozilla Thunderbird

Priority MEDIUM 47

A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.12024 Published 2018-06-11 Fixed in 45.5, 50 CWE-119
TI-2016-04593 CVE-2016-5297 · GHSA-3h9f-q3m2-wjhj

Integer overflow in Mozilla Thunderbird

Priority MEDIUM 48

An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03531 Published 2018-06-11 Fixed in 45.5, 50 CWE-190
TI-2016-04592 CVE-2016-5296 · GHSA-q9hf-wj5h-x9vx

Memory corruption in Mozilla Thunderbird

Priority LOW 39

A heap-buffer-overflow in Cairo when processing SVG content caused by compiler optimization, resulting in a potentially exploitable crash.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03387 Published 2018-06-11 Fixed in 45.5, 50 CWE-119
TI-2016-04587 CVE-2016-5291 · GHSA-5rpq-63gx-j9m8

Improper input validation in Mozilla Thunderbird

Priority LOW 25

A same-origin policy bypass with local shortcut files to load arbitrary local content from disk.

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00433 Published 2018-06-11 Fixed in 45.5, 50 CWE-20
TI-2016-04586 CVE-2016-5290 · GHSA-qf56-xjg6-qx59

Memory corruption in Mozilla Thunderbird

Priority MEDIUM 48

Memory safety bugs were reported in Firefox 49 and Firefox ESR 45.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03212 Published 2018-06-11 Fixed in 45.5, 50 CWE-119