TI-2017-03490 CVE-2017-5467 · GHSA-98fj-fcw2-h99w
Memory corruption in Mozilla Thunderbird
Priority LOW 37
A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region.
Vulnerabilities
6 records
TI-2017-03489 CVE-2017-5466 · GHSA-hx2v-35mh-6pxc
Cross-site scripting in Mozilla Thunderbird
Priority LOW 30
If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set incorrectly.
TI-2017-03478 CVE-2017-5454 · GHSA-4v77-6pxw-9whf
Information disclosure in Mozilla Thunderbird
Priority LOW 37
A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths.
TI-2017-03475 CVE-2017-5451 · GHSA-vvjr-2r7m-cm7q
Improper input validation in Mozilla Thunderbird
Priority LOW 23
A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event.
TI-2017-03473 CVE-2017-5449 · GHSA-jqh9-5c52-gwx9
Improper input validation in Mozilla Thunderbird
Priority LOW 38
A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations.
TI-2017-03456 CVE-2017-5430 · GHSA-4x26-g6p5-4wpg
Memory corruption in Mozilla Thunderbird
Priority MEDIUM 48
Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52.