Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Release: Mozilla Firefox ESR 52.1 Clear all filters
TI-2017-03490 CVE-2017-5467 · GHSA-98fj-fcw2-h99w

Memory corruption in Mozilla Thunderbird

Priority LOW 37

A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02425 Published 2018-06-11 Partial fix · 52.1, 53 CWE-119
TI-2017-03489 CVE-2017-5466 · GHSA-hx2v-35mh-6pxc

Cross-site scripting in Mozilla Thunderbird

Priority LOW 30

If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set incorrectly.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01515 Published 2018-06-11 Partial fix · 52.1, 53 CWE-79
TI-2017-03480 CVE-2017-5456 · GHSA-59p4-f6m8-9792

Incorrect permission assignment in Mozilla Firefox ESR

Priority MEDIUM 47

A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02728 Published 2018-06-11 Partial fix · 52.1, 53 CWE-732
TI-2017-03478 CVE-2017-5454 · GHSA-4v77-6pxw-9whf

Information disclosure in Mozilla Thunderbird

Priority LOW 37

A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02437 Published 2018-06-11 Partial fix · 52.1, 53 CWE-200
TI-2017-03475 CVE-2017-5451 · GHSA-vvjr-2r7m-cm7q

Improper input validation in Mozilla Thunderbird

Priority LOW 23

A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.01481 Published 2018-06-11 Partial fix · 52.1, 53 CWE-20
TI-2017-03473 CVE-2017-5449 · GHSA-jqh9-5c52-gwx9

Improper input validation in Mozilla Thunderbird

Priority LOW 38

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02513 Published 2018-06-11 Partial fix · 52.1, 53 CWE-20
TI-2017-03456 CVE-2017-5430 · GHSA-4x26-g6p5-4wpg

Memory corruption in Mozilla Thunderbird

Priority MEDIUM 48

Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03 Published 2018-06-11 Partial fix · 52.1, 53 CWE-119