Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Mozilla Firefox ESR, Thunderbird 52.3 Clear all filters
TI-2017-05421 CVE-2017-7804 · GHSA-ggg7-2mjh-7h65

Improper input validation in Mozilla Thunderbird

Priority LOW 36

The destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious code in concert with another vulnerability to write arbitrary data to an attacker controlled location in memory.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01458 Published 2018-06-11 Fixed in 52.3, 55 CWE-20
TI-2017-05400 CVE-2017-7782 · GHSA-jp88-jrm3-mr7m

Improper privilege management in Mozilla Thunderbird

Priority LOW 26

An error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is allocated but never protected, violating DEP protections.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01057 Published 2018-06-11 Fixed in 52.3, 55 CWE-269