ID CVE-2018-5183
Summary Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
References
Vulnerable Configurations
  • Red Hat Enterprise Linux Desktop 6.0
    cpe:2.3:o:redhat:enterprise_linux_desktop:6.0
  • RedHat Enterprise Linux Desktop 7.0
    cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
  • Red Hat Enterprise Linux Server 6.0
    cpe:2.3:o:redhat:enterprise_linux_server:6.0
  • RedHat Enterprise Linux Server 7.0
    cpe:2.3:o:redhat:enterprise_linux_server:7.0
  • Red Hat Enterprise Linux Server Advanced mission critical Update Support (AUS) 7.6
    cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6
  • Red Hat Enterprise Linux Server Extended Update Support (EUS) 7.5
    cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5
  • Red Hat Enterprise Linux Server Extended Update Support (EUS) 7.6
    cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6
  • Red Hat Enterprise Linux Server Telecommunications Update Service (TUS) 7.6
    cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6
  • Red Hat Enterprise Linux Workstation 6.0
    cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
  • RedHat Enterprise Linux Workstation 7.0
    cpe:2.3:o:redhat:enterprise_linux_workstation:7.0
  • Debian Linux 7.0
    cpe:2.3:o:debian:debian_linux:7.0
  • Debian Linux 8.0 (Jessie)
    cpe:2.3:o:debian:debian_linux:8.0
  • Debian Linux 9.0
    cpe:2.3:o:debian:debian_linux:9.0
  • Canonical Ubuntu Linux 14.04 LTS (Long-Term Support)
    cpe:2.3:o:canonical:ubuntu_linux:14.04:-:-:-:lts
  • Canonical Ubuntu Linux 16.04 LTS (Long-Term Support)
    cpe:2.3:o:canonical:ubuntu_linux:16.04:-:-:-:lts
  • Canonical Ubuntu Linux 17.10
    cpe:2.3:o:canonical:ubuntu_linux:17.10
  • Canonical Ubuntu Linux 18.04 LTS Edition
    cpe:2.3:o:canonical:ubuntu_linux:18.04:-:-:-:lts
  • Mozilla Firefox Extended Support Release (ESR) 10.0
    cpe:2.3:a:mozilla:firefox_esr:10.0
  • Mozilla Firefox Extended Support Release (ESR) 10.1
    cpe:2.3:a:mozilla:firefox_esr:10.0.1
  • Mozilla Firefox Extended Support Release (ESR) 10.0.2
    cpe:2.3:a:mozilla:firefox_esr:10.0.2
  • Mozilla Firefox Extended Support Release (ESR) 10.0.3
    cpe:2.3:a:mozilla:firefox_esr:10.0.3
  • Mozilla Firefox Extended Support Release (ESR) 10.0.4
    cpe:2.3:a:mozilla:firefox_esr:10.0.4
  • Mozilla Firefox Extended Support Release (ESR) 10.0.5
    cpe:2.3:a:mozilla:firefox_esr:10.0.5
  • Mozilla Firefox Extended Support Release (ESR) 10.0.6
    cpe:2.3:a:mozilla:firefox_esr:10.0.6
  • Mozilla Firefox Extended Support Release (ESR) 10.0.7
    cpe:2.3:a:mozilla:firefox_esr:10.0.7
  • Mozilla Firefox Extended Support Release (ESR) 10.0.8
    cpe:2.3:a:mozilla:firefox_esr:10.0.8
  • Mozilla Firefox Extended Support Release (ESR) 10.0.9
    cpe:2.3:a:mozilla:firefox_esr:10.0.9
  • Mozilla Firefox Extended Support Release (ESR) 10.0.10
    cpe:2.3:a:mozilla:firefox_esr:10.0.10
  • Mozilla Firefox Extended Support Release (ESR) 10.0.11
    cpe:2.3:a:mozilla:firefox_esr:10.0.11
  • Mozilla Firefox Extended Support Release (ESR) 10.0.12
    cpe:2.3:a:mozilla:firefox_esr:10.0.12
  • Mozilla Firefox Extended Support Release (ESR) 17.0
    cpe:2.3:a:mozilla:firefox_esr:17.0
  • Mozilla Firefox Extended Support Release (ESR) 17.0.1
    cpe:2.3:a:mozilla:firefox_esr:17.0.1
  • Mozilla Firefox Extended Support Release (ESR) 17.0.2
    cpe:2.3:a:mozilla:firefox_esr:17.0.2
  • Mozilla Firefox Extended Support Release (ESR) 17.0.3
    cpe:2.3:a:mozilla:firefox_esr:17.0.3
  • Mozilla Firefox Extended Support Release (ESR) 17.0.4
    cpe:2.3:a:mozilla:firefox_esr:17.0.4
  • Mozilla Firefox Extended Support Release (ESR) 17.0.5
    cpe:2.3:a:mozilla:firefox_esr:17.0.5
  • Mozilla Firefox Extended Support Release (ESR) 17.0.6
    cpe:2.3:a:mozilla:firefox_esr:17.0.6
  • Mozilla Firefox Extended Support Release (ESR) 17.0.7
    cpe:2.3:a:mozilla:firefox_esr:17.0.7
  • Mozilla Firefox Extended Support Release (ESR) 17.0.8
    cpe:2.3:a:mozilla:firefox_esr:17.0.8
  • Mozilla Firefox Extended Support Release (ESR) 17.0.9
    cpe:2.3:a:mozilla:firefox_esr:17.0.9
  • Mozilla Firefox Extended Support Release (ESR) 17.0.10
    cpe:2.3:a:mozilla:firefox_esr:17.0.10
  • Mozilla Firefox Extended Support Release (ESR) 17.0.11
    cpe:2.3:a:mozilla:firefox_esr:17.0.11
  • Mozilla Firefox Extended Support Release (ESR) 24.0
    cpe:2.3:a:mozilla:firefox_esr:24.0
  • Mozilla Firefox Extended Support Release (ESR) 24.0.1
    cpe:2.3:a:mozilla:firefox_esr:24.0.1
  • Mozilla Firefox Extended Support Release (ESR) 24.0.2
    cpe:2.3:a:mozilla:firefox_esr:24.0.2
  • Mozilla Firefox Extended Support Release (ESR) 24.1.0
    cpe:2.3:a:mozilla:firefox_esr:24.1.0
  • Mozilla Firefox Extended Support Release (ESR) 24.1.1
    cpe:2.3:a:mozilla:firefox_esr:24.1.1
  • Mozilla Firefox Extended Support Release (ESR) 24.2
    cpe:2.3:a:mozilla:firefox_esr:24.2
  • Mozilla Firefox Extended Support Release (ESR) 24.3
    cpe:2.3:a:mozilla:firefox_esr:24.3
  • Mozilla Firefox Extended Support Release (ESR) 24.4
    cpe:2.3:a:mozilla:firefox_esr:24.4
  • Mozilla Firefox Extended Support Release (ESR) 24.5
    cpe:2.3:a:mozilla:firefox_esr:24.5
  • Mozilla Firefox Extended Support Release (ESR) 24.6
    cpe:2.3:a:mozilla:firefox_esr:24.6
  • Mozilla Firefox Extended Support Release (ESR) 24.7
    cpe:2.3:a:mozilla:firefox_esr:24.7
  • Mozilla Firefox Extended Support Release (ESR) 24.8
    cpe:2.3:a:mozilla:firefox_esr:24.8
  • Mozilla Firefox Extended Support Release (ESR) 31.0
    cpe:2.3:a:mozilla:firefox_esr:31.0
  • Mozilla Firefox Extended Support Release (ESR) 31.1
    cpe:2.3:a:mozilla:firefox_esr:31.1
  • Mozilla Firefox Extended Support Release (ESR) 31.1.0
    cpe:2.3:a:mozilla:firefox_esr:31.1.0
  • Mozilla Firefox Extended Support Release (ESR) 31.1.1
    cpe:2.3:a:mozilla:firefox_esr:31.1.1
  • Mozilla Firefox Extended Support Release (ESR) 31.2
    cpe:2.3:a:mozilla:firefox_esr:31.2
  • Mozilla Firefox Extended Support Release (ESR) 31.3
    cpe:2.3:a:mozilla:firefox_esr:31.3
  • Mozilla Firefox Extended Support Release (ESR) 31.3.0
    cpe:2.3:a:mozilla:firefox_esr:31.3.0
  • Mozilla Firefox Extended Support Release (ESR) 31.4
    cpe:2.3:a:mozilla:firefox_esr:31.4
  • Mozilla Firefox Extended Support Release (ESR) 31.5
    cpe:2.3:a:mozilla:firefox_esr:31.5
  • Mozilla Firefox Extended Support Release (ESR) 31.5.1
    cpe:2.3:a:mozilla:firefox_esr:31.5.1
  • Mozilla Firefox Extended Support Release (ESR) 31.5.2
    cpe:2.3:a:mozilla:firefox_esr:31.5.2
  • Mozilla Firefox Extended Support Release (ESR) 31.5.3
    cpe:2.3:a:mozilla:firefox_esr:31.5.3
  • Mozilla Firefox Extended Support Release (ESR) 31.6
    cpe:2.3:a:mozilla:firefox_esr:31.6
  • Mozilla Firefox Extended Support Release (ESR) 31.8
    cpe:2.3:a:mozilla:firefox_esr:31.8
  • Mozilla Firefox ESR 38.0
    cpe:2.3:a:mozilla:firefox_esr:38.0
  • Mozilla Firefox ESR 38.0 (64 bit)
    cpe:2.3:a:mozilla:firefox_esr:38.0:-:-:-:-:-:x64
  • Mozilla Firefox ESR 38.0.1
    cpe:2.3:a:mozilla:firefox_esr:38.0.1
  • Mozilla Firefox ESR 38.0.1 (64 bit)
    cpe:2.3:a:mozilla:firefox_esr:38.0.1:-:-:-:-:-:x64
  • Mozilla Firefox ESR 38.0.5
    cpe:2.3:a:mozilla:firefox_esr:38.0.5
  • Mozilla Firefox ESR 38.0.5 (64 bit)
    cpe:2.3:a:mozilla:firefox_esr:38.0.5:-:-:-:-:-:x64
  • Mozilla Firefox ESR 38.1.0
    cpe:2.3:a:mozilla:firefox_esr:38.1.0
  • Mozilla Firefox ESR 38.1.0 (64 bit)
    cpe:2.3:a:mozilla:firefox_esr:38.1.0:-:-:-:-:-:x64
  • Mozilla Firefox ESR 38.1.1
    cpe:2.3:a:mozilla:firefox_esr:38.1.1
  • Mozilla Firefox ESR 38.1.1 (64 bit)
    cpe:2.3:a:mozilla:firefox_esr:38.1.1:-:-:-:-:-:x64
  • Mozilla Firefox ESR 38.2.0
    cpe:2.3:a:mozilla:firefox_esr:38.2.0
  • Mozilla Firefox ESR 38.2.0 (64 bit)
    cpe:2.3:a:mozilla:firefox_esr:38.2.0:-:-:-:-:-:x64
  • Mozilla Firefox ESR 38.2.1
    cpe:2.3:a:mozilla:firefox_esr:38.2.1
  • Mozilla Firefox ESR 38.2.1 (64 bit)
    cpe:2.3:a:mozilla:firefox_esr:38.2.1:-:-:-:-:-:x64
  • Mozilla Firefox Extended Support Release (ESR) 38.3.0
    cpe:2.3:a:mozilla:firefox_esr:38.3.0
  • Mozilla Firefox ESR 38.3.0 (64 bit)
    cpe:2.3:a:mozilla:firefox_esr:38.3.0:-:-:-:-:-:x64
  • Mozilla Firefox ESR 38.4.0
    cpe:2.3:a:mozilla:firefox_esr:38.4.0
  • Mozilla Firefox ESR 38.4.0 (64 bit)
    cpe:2.3:a:mozilla:firefox_esr:38.4.0:-:-:-:-:-:x64
  • Mozilla Firefox ESR 38.5.0
    cpe:2.3:a:mozilla:firefox_esr:38.5.0
  • Mozilla Firefox ESR 38.5.1
    cpe:2.3:a:mozilla:firefox_esr:38.5.1
  • Mozilla Firefox ESR 38.5.2
    cpe:2.3:a:mozilla:firefox_esr:38.5.2
  • Mozilla Firefox Extended Support Release (ESR) 38.6.0
    cpe:2.3:a:mozilla:firefox_esr:38.6.0
  • Mozilla Firefox Extended Support Release (ESR) 38.6.1
    cpe:2.3:a:mozilla:firefox_esr:38.6.1
  • Mozilla Firefox Extended Support Release (ESR) 38.7.0
    cpe:2.3:a:mozilla:firefox_esr:38.7.0
  • Mozilla Firefox Extended Support Release (ESR) 38.7.1
    cpe:2.3:a:mozilla:firefox_esr:38.7.1
  • Mozilla Firefox ESR 38.8.0
    cpe:2.3:a:mozilla:firefox_esr:38.8.0
  • Mozilla Firefox Extended Support Release (ESR) 45.0.2
    cpe:2.3:a:mozilla:firefox_esr:45.0.2
  • Mozilla Firefox Extended Support Release (ESR) 45.1.0
    cpe:2.3:a:mozilla:firefox_esr:45.1.0
  • Mozilla Firefox Extended Support Release (ESR) 45.1.1
    cpe:2.3:a:mozilla:firefox_esr:45.1.1
  • Mozilla Firefox Extended Support Release (ESR) 45.2.0
    cpe:2.3:a:mozilla:firefox_esr:45.2.0
  • Mozilla Firefox Extended Support Release (ESR) 45.3.0
    cpe:2.3:a:mozilla:firefox_esr:45.3.0
  • Mozilla Firefox ESR 45.4.0
    cpe:2.3:a:mozilla:firefox_esr:45.4.0
  • Mozilla Firefox ESR 45.5.0
    cpe:2.3:a:mozilla:firefox_esr:45.5.0
  • Mozilla Thunderbird
    cpe:2.3:a:mozilla:thunderbird
  • Mozilla Thunderbird 0.1
    cpe:2.3:a:mozilla:thunderbird:0.1
  • Mozilla Thunderbird 0.2
    cpe:2.3:a:mozilla:thunderbird:0.2
  • Mozilla Thunderbird 0.3
    cpe:2.3:a:mozilla:thunderbird:0.3
  • Mozilla Thunderbird 0.4
    cpe:2.3:a:mozilla:thunderbird:0.4
  • Mozilla Thunderbird 0.5
    cpe:2.3:a:mozilla:thunderbird:0.5
  • Mozilla Thunderbird 0.6
    cpe:2.3:a:mozilla:thunderbird:0.6
  • Mozilla Thunderbird 0.7
    cpe:2.3:a:mozilla:thunderbird:0.7
  • Mozilla Thunderbird 0.7 Release Candidate
    cpe:2.3:a:mozilla:thunderbird:0.7:rc
  • Mozilla Thunderbird 0.7.1
    cpe:2.3:a:mozilla:thunderbird:0.7.1
  • Mozilla Thunderbird 0.7.2
    cpe:2.3:a:mozilla:thunderbird:0.7.2
  • Mozilla Thunderbird 0.7.3
    cpe:2.3:a:mozilla:thunderbird:0.7.3
  • Mozilla Thunderbird 0.8
    cpe:2.3:a:mozilla:thunderbird:0.8
  • Mozilla Thunderbird 0.9
    cpe:2.3:a:mozilla:thunderbird:0.9
  • Mozilla Thunderbird 1.0
    cpe:2.3:a:mozilla:thunderbird:1.0
  • Mozilla Thunderbird 1.0 Release Candidate
    cpe:2.3:a:mozilla:thunderbird:1.0:rc
  • Mozilla Thunderbird 1.0.2
    cpe:2.3:a:mozilla:thunderbird:1.0.2
  • Mozilla Thunderbird 1.0.5
    cpe:2.3:a:mozilla:thunderbird:1.0.5
  • Mozilla Thunderbird 1.0.6
    cpe:2.3:a:mozilla:thunderbird:1.0.6
  • Mozilla Thunderbird 1.0.7
    cpe:2.3:a:mozilla:thunderbird:1.0.7
  • Mozilla Thunderbird 1.0.8
    cpe:2.3:a:mozilla:thunderbird:1.0.8
  • Mozilla Thunderbird 1.1 Alpha 1
    cpe:2.3:a:mozilla:thunderbird:1.1:alpha1
  • Mozilla Thunderbird 1.1 Alpha 2
    cpe:2.3:a:mozilla:thunderbird:1.1:alpha2
  • Mozilla Thunderbird 1.5
    cpe:2.3:a:mozilla:thunderbird:1.5
  • Mozilla Thunderbird 1.5 Beta 1
    cpe:2.3:a:mozilla:thunderbird:1.5:beta1
  • Mozilla Thunderbird 1.5 Beta 2
    cpe:2.3:a:mozilla:thunderbird:1.5:beta2
  • Mozilla Thunderbird 1.5 Release Candidate 1
    cpe:2.3:a:mozilla:thunderbird:1.5:rc1
  • Mozilla Thunderbird 1.5 Release Candidate 2
    cpe:2.3:a:mozilla:thunderbird:1.5:rc2
  • Mozilla Thunderbird 1.5.0.2
    cpe:2.3:a:mozilla:thunderbird:1.5.0.2
  • Mozilla Thunderbird 1.5.0.4
    cpe:2.3:a:mozilla:thunderbird:1.5.0.4
  • Mozilla Thunderbird 1.5.0.5
    cpe:2.3:a:mozilla:thunderbird:1.5.0.5
  • Mozilla Thunderbird 1.5.0.7
    cpe:2.3:a:mozilla:thunderbird:1.5.0.7
  • Mozilla Thunderbird 1.5.0.8
    cpe:2.3:a:mozilla:thunderbird:1.5.0.8
  • Mozilla Thunderbird 1.5.0.9
    cpe:2.3:a:mozilla:thunderbird:1.5.0.9
  • Mozilla Thunderbird 1.5.0.10
    cpe:2.3:a:mozilla:thunderbird:1.5.0.10
  • Mozilla Thunderbird 1.5.0.12
    cpe:2.3:a:mozilla:thunderbird:1.5.0.12
  • Mozilla Thunderbird 1.5.0.13
    cpe:2.3:a:mozilla:thunderbird:1.5.0.13
  • Mozilla Thunderbird 1.5.0.14
    cpe:2.3:a:mozilla:thunderbird:1.5.0.14
  • Mozilla Thunderbird 2.0
    cpe:2.3:a:mozilla:thunderbird:2.0
  • Mozilla Thunderbird 2.0 Alpha 1
    cpe:2.3:a:mozilla:thunderbird:2.0:alpha1
  • Mozilla Thunderbird 2.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:2.0:beta1
  • Mozilla Thunderbird 2.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:2.0:beta2
  • Mozilla Thunderbird 2.0.0.0
    cpe:2.3:a:mozilla:thunderbird:2.0.0.0
  • Mozilla Thunderbird 2.0.0.0 Release Candidate 1
    cpe:2.3:a:mozilla:thunderbird:2.0.0.0:rc1
  • Mozilla Thunderbird 2.0.0.4
    cpe:2.3:a:mozilla:thunderbird:2.0.0.4
  • Mozilla Thunderbird 2.0.0.5
    cpe:2.3:a:mozilla:thunderbird:2.0.0.5
  • Mozilla Thunderbird 2.0.0.6
    cpe:2.3:a:mozilla:thunderbird:2.0.0.6
  • Mozilla Thunderbird 2.0.0.9
    cpe:2.3:a:mozilla:thunderbird:2.0.0.9
  • Mozilla Thunderbird 2.0.0.12
    cpe:2.3:a:mozilla:thunderbird:2.0.0.12
  • Mozilla Thunderbird 2.0.0.14
    cpe:2.3:a:mozilla:thunderbird:2.0.0.14
  • Mozilla Thunderbird 2.0.0.16
    cpe:2.3:a:mozilla:thunderbird:2.0.0.16
  • Mozilla Thunderbird 2.0.0.17
    cpe:2.3:a:mozilla:thunderbird:2.0.0.17
  • Mozilla Thunderbird 2.0.0.18
    cpe:2.3:a:mozilla:thunderbird:2.0.0.18
  • Mozilla Thunderbird 2.0.0.19
    cpe:2.3:a:mozilla:thunderbird:2.0.0.19
  • Mozilla Thunderbird 2.0.0.21
    cpe:2.3:a:mozilla:thunderbird:2.0.0.21
  • Mozilla Thunderbird 2.0.0.22
    cpe:2.3:a:mozilla:thunderbird:2.0.0.22
  • Mozilla Thunderbird 2.0.0.23
    cpe:2.3:a:mozilla:thunderbird:2.0.0.23
  • Mozilla Thunderbird 2.0.0.24
    cpe:2.3:a:mozilla:thunderbird:2.0.0.24
  • Mozilla Thunderbird 2.0.0.14
    cpe:2.3:a:mozilla:thunderbird:2.0.14
  • Mozilla Thunderbird 3.0
    cpe:2.3:a:mozilla:thunderbird:3.0
  • Mozilla Thunderbird 3.0 Alpha 1
    cpe:2.3:a:mozilla:thunderbird:3.0:alpha1
  • Mozilla Thunderbird 3.0 Alpha 2
    cpe:2.3:a:mozilla:thunderbird:3.0:alpha2
  • Mozilla Thunderbird 3.0 Alpha 3
    cpe:2.3:a:mozilla:thunderbird:3.0:alpha3
  • Mozilla Thunderbird 3.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:3.0:beta1
  • Mozilla Thunderbird 3.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:3.0:beta2
  • Mozilla Thunderbird 3.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:3.0:beta3
  • Mozilla Thunderbird 3.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:3.0:beta4
  • Mozilla Thunderbird 3.0 Release Candidate 1
    cpe:2.3:a:mozilla:thunderbird:3.0:rc1
  • Mozilla Thunderbird 3.0 Release Candidate 2
    cpe:2.3:a:mozilla:thunderbird:3.0:rc2
  • Mozilla Thunderbird 3.0.1
    cpe:2.3:a:mozilla:thunderbird:3.0.1
  • Mozilla Thunderbird 3.0.2
    cpe:2.3:a:mozilla:thunderbird:3.0.2
  • Mozilla Thunderbird 3.0.3
    cpe:2.3:a:mozilla:thunderbird:3.0.3
  • Mozilla Thunderbird 3.0.4
    cpe:2.3:a:mozilla:thunderbird:3.0.4
  • Mozilla Thunderbird 3.0.5
    cpe:2.3:a:mozilla:thunderbird:3.0.5
  • Mozilla Thunderbird 3.0.6
    cpe:2.3:a:mozilla:thunderbird:3.0.6
  • Mozilla Thunderbird 3.0.7
    cpe:2.3:a:mozilla:thunderbird:3.0.7
  • Mozilla Thunderbird 3.0.8
    cpe:2.3:a:mozilla:thunderbird:3.0.8
  • Mozilla Thunderbird 3.0.9
    cpe:2.3:a:mozilla:thunderbird:3.0.9
  • Mozilla Thunderbird 3.0.10
    cpe:2.3:a:mozilla:thunderbird:3.0.10
  • Mozilla Thunderbird 3.0.11
    cpe:2.3:a:mozilla:thunderbird:3.0.11
  • Mozilla Thunderbird 3.1
    cpe:2.3:a:mozilla:thunderbird:3.1
  • Mozilla Thunderbird 3.1 Alpha 1
    cpe:2.3:a:mozilla:thunderbird:3.1:alpha1
  • Mozilla Thunderbird 3.1 Beta 1
    cpe:2.3:a:mozilla:thunderbird:3.1:beta1
  • Mozilla Thunderbird 3.1 Beta 2
    cpe:2.3:a:mozilla:thunderbird:3.1:beta2
  • Mozilla Thunderbird 3.1 Release Candidate 1
    cpe:2.3:a:mozilla:thunderbird:3.1:rc1
  • Mozilla Thunderbird 3.1 Release Candidate 2
    cpe:2.3:a:mozilla:thunderbird:3.1:rc2
  • Mozilla Thunderbird 3.1.1
    cpe:2.3:a:mozilla:thunderbird:3.1.1
  • Mozilla Thunderbird 3.1.2
    cpe:2.3:a:mozilla:thunderbird:3.1.2
  • Mozilla Thunderbird 3.1.3
    cpe:2.3:a:mozilla:thunderbird:3.1.3
  • Mozilla Thunderbird 3.1.4
    cpe:2.3:a:mozilla:thunderbird:3.1.4
  • Mozilla Thunderbird 3.1.5
    cpe:2.3:a:mozilla:thunderbird:3.1.5
  • Mozilla Thunderbird 3.1.6
    cpe:2.3:a:mozilla:thunderbird:3.1.6
  • Mozilla Thunderbird 3.1.7
    cpe:2.3:a:mozilla:thunderbird:3.1.7
  • Mozilla Thunderbird 3.1.8
    cpe:2.3:a:mozilla:thunderbird:3.1.8
  • Mozilla Thunderbird 3.1.9
    cpe:2.3:a:mozilla:thunderbird:3.1.9
  • Mozilla Thunderbird 3.1.10
    cpe:2.3:a:mozilla:thunderbird:3.1.10
  • Mozilla Thunderbird 3.1.11
    cpe:2.3:a:mozilla:thunderbird:3.1.11
  • Mozilla Thunderbird 3.1.12
    cpe:2.3:a:mozilla:thunderbird:3.1.12
  • Mozilla Thunderbird 3.1.13
    cpe:2.3:a:mozilla:thunderbird:3.1.13
  • Mozilla Thunderbird 3.1.14
    cpe:2.3:a:mozilla:thunderbird:3.1.14
  • Mozilla Thunderbird 3.1.15
    cpe:2.3:a:mozilla:thunderbird:3.1.15
  • Mozilla Thunderbird 3.1.16
    cpe:2.3:a:mozilla:thunderbird:3.1.16
  • Mozilla Thunderbird 3.1.17
    cpe:2.3:a:mozilla:thunderbird:3.1.17
  • Mozilla Thunderbird 3.1.18
    cpe:2.3:a:mozilla:thunderbird:3.1.18
  • Mozilla Thunderbird 3.1.19
    cpe:2.3:a:mozilla:thunderbird:3.1.19
  • Mozilla Thunderbird 3.1.20
    cpe:2.3:a:mozilla:thunderbird:3.1.20
  • Mozilla Thunderbird 3.3 Alpha 1
    cpe:2.3:a:mozilla:thunderbird:3.3:alpha1
  • Mozilla Thunderbird 3.3 Alpha 2
    cpe:2.3:a:mozilla:thunderbird:3.3:alpha2
  • Mozilla Thunderbird 3.3 Alpha 3
    cpe:2.3:a:mozilla:thunderbird:3.3:alpha3
  • Mozilla Thunderbird 5.0
    cpe:2.3:a:mozilla:thunderbird:5.0
  • Mozilla Thunderbird 5.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:5.0:beta1
  • Mozilla Thunderbird 5.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:5.0:beta2
  • Mozilla Thunderbird 6.0
    cpe:2.3:a:mozilla:thunderbird:6.0
  • Mozilla Thunderbird 6.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:6.0:beta1
  • Mozilla Thunderbird 6.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:6.0:beta2
  • Mozilla Thunderbird 6.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:6.0:beta3
  • Mozilla Thunderbird 6.0.1
    cpe:2.3:a:mozilla:thunderbird:6.0.1
  • Mozilla Thunderbird 6.0.2
    cpe:2.3:a:mozilla:thunderbird:6.0.2
  • Mozilla Thunderbird 7.0
    cpe:2.3:a:mozilla:thunderbird:7.0
  • Mozilla Thunderbird 7.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:7.0:beta1
  • Mozilla Thunderbird 7.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:7.0:beta2
  • Mozilla Thunderbird 7.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:7.0:beta3
  • Mozilla Thunderbird 7.0.1
    cpe:2.3:a:mozilla:thunderbird:7.0.1
  • Mozilla Thunderbird 8.0
    cpe:2.3:a:mozilla:thunderbird:8.0
  • Mozilla Thunderbird 8.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:8.0:beta1
  • Mozilla Thunderbird 8.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:8.0:beta2
  • Mozilla Thunderbird 8.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:8.0:beta3
  • Mozilla Thunderbird 8.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:8.0:beta4
  • Mozilla Thunderbird 8.0 Beta 5
    cpe:2.3:a:mozilla:thunderbird:8.0:beta5
  • Mozilla Thunderbird 9.0
    cpe:2.3:a:mozilla:thunderbird:9.0
  • Mozilla Thunderbird 9.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:9.0:beta1
  • Mozilla Thunderbird 9.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:9.0:beta2
  • Mozilla Thunderbird 9.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:9.0:beta3
  • Mozilla Thunderbird 9.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:9.0:beta4
  • Mozilla Thunderbird 9.0 Beta 5
    cpe:2.3:a:mozilla:thunderbird:9.0:beta5
  • Mozilla Thunderbird 9.0.1
    cpe:2.3:a:mozilla:thunderbird:9.0.1
  • Mozilla Thunderbird 10.0
    cpe:2.3:a:mozilla:thunderbird:10.0
  • Mozilla Thunderbird 10.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:10.0:beta1
  • Mozilla Thunderbird 10.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:10.0:beta2
  • Mozilla Thunderbird 10.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:10.0:beta3
  • Mozilla Thunderbird 10.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:10.0:beta4
  • Mozilla Thunderbird 10.0 Beta 5
    cpe:2.3:a:mozilla:thunderbird:10.0:beta5
  • Mozilla Thunderbird 10.0.1
    cpe:2.3:a:mozilla:thunderbird:10.0.1
  • Mozilla Thunderbird 10.0.2
    cpe:2.3:a:mozilla:thunderbird:10.0.2
  • Mozilla Thunderbird 11.0
    cpe:2.3:a:mozilla:thunderbird:11.0
  • Mozilla Thunderbird 11.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:11.0:beta1
  • Mozilla Thunderbird 11.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:11.0:beta2
  • Mozilla Thunderbird 11.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:11.0:beta3
  • Mozilla Thunderbird 11.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:11.0:beta4
  • Mozilla Thunderbird 11.0 Beta 5
    cpe:2.3:a:mozilla:thunderbird:11.0:beta5
  • Mozilla Thunderbird 11.0.1
    cpe:2.3:a:mozilla:thunderbird:11.0.1
  • Mozilla Thunderbird 12.0
    cpe:2.3:a:mozilla:thunderbird:12.0
  • Mozilla Thunderbird 12.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:12.0:beta1
  • Mozilla Thunderbird 12.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:12.0:beta2
  • Mozilla Thunderbird 12.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:12.0:beta3
  • Mozilla Thunderbird 12.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:12.0:beta4
  • Mozilla Thunderbird 12.0 Beta 5
    cpe:2.3:a:mozilla:thunderbird:12.0:beta5
  • Mozilla Thunderbird 12.0.1
    cpe:2.3:a:mozilla:thunderbird:12.0.1
  • Mozilla Thunderbird 13.0
    cpe:2.3:a:mozilla:thunderbird:13.0
  • Mozilla Thunderbird 13.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:13.0:beta1
  • Mozilla Thunderbird 13.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:13.0:beta2
  • Mozilla Thunderbird 13.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:13.0:beta3
  • Mozilla Thunderbird 13.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:13.0:beta4
  • Mozilla Thunderbird 13.0.1
    cpe:2.3:a:mozilla:thunderbird:13.0.1
  • Mozilla Thunderbird 14.0
    cpe:2.3:a:mozilla:thunderbird:14.0
  • Mozilla Thunderbird 14.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:14.0:beta1
  • Mozilla Thunderbird 14.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:14.0:beta2
  • Mozilla Thunderbird 14.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:14.0:beta3
  • Mozilla Thunderbird 14.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:14.0:beta4
  • Mozilla Thunderbird 14.0 Beta 5
    cpe:2.3:a:mozilla:thunderbird:14.0:beta5
  • Mozilla Thunderbird 15.0
    cpe:2.3:a:mozilla:thunderbird:15.0
  • Mozilla Thunderbird 15.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:15.0:beta1
  • Mozilla Thunderbird 15.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:15.0:beta2
  • Mozilla Thunderbird 15.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:15.0:beta3
  • Mozilla Thunderbird 15.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:15.0:beta4
  • Mozilla Thunderbird 15.0 Beta 5
    cpe:2.3:a:mozilla:thunderbird:15.0:beta5
  • Mozilla Thunderbird 15.0.1
    cpe:2.3:a:mozilla:thunderbird:15.0.1
  • Mozilla Thunderbird 16.0
    cpe:2.3:a:mozilla:thunderbird:16.0
  • Mozilla Thunderbird 16.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:16.0:beta1
  • Mozilla Thunderbird 16.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:16.0:beta2
  • Mozilla Thunderbird 16.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:16.0:beta3
  • Mozilla Thunderbird 16.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:16.0:beta4
  • Mozilla Thunderbird 16.0.1
    cpe:2.3:a:mozilla:thunderbird:16.0.1
  • Mozilla Thunderbird 16.0.2
    cpe:2.3:a:mozilla:thunderbird:16.0.2
  • Mozilla Thunderbird 17.0
    cpe:2.3:a:mozilla:thunderbird:17.0
  • Mozilla Thunderbird 17.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:17.0:beta1
  • Mozilla Thunderbird 17.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:17.0:beta2
  • Mozilla Thunderbird 17.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:17.0:beta3
  • Mozilla Thunderbird 17.0.2
    cpe:2.3:a:mozilla:thunderbird:17.0.2
  • Mozilla Thunderbird 17.0.3
    cpe:2.3:a:mozilla:thunderbird:17.0.3
  • Mozilla Thunderbird 17.0.4
    cpe:2.3:a:mozilla:thunderbird:17.0.4
  • Mozilla Thunderbird 17.0.5
    cpe:2.3:a:mozilla:thunderbird:17.0.5
  • Mozilla Thunderbird 17.0.6
    cpe:2.3:a:mozilla:thunderbird:17.0.6
  • Mozilla Thunderbird 17.0.7
    cpe:2.3:a:mozilla:thunderbird:17.0.7
  • Mozilla Thunderbird 17.0.8
    cpe:2.3:a:mozilla:thunderbird:17.0.8
  • Mozilla Thunderbird 17.0.9
    cpe:2.3:a:mozilla:thunderbird:17.0.9
  • Mozilla Thunderbird 17.0.10
    cpe:2.3:a:mozilla:thunderbird:17.0.10
  • Mozilla Thunderbird 18.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:18.0:beta1
  • Mozilla Thunderbird 19.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:19.0:beta1
  • Mozilla Thunderbird 20.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:20.0:beta1
  • Mozilla Thunderbird 21.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:21.0:beta1
  • Mozilla Thunderbird 22.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:22.0:beta1
  • Mozilla Thunderbird 23.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:23.0:beta1
  • Mozilla Thunderbird 24.0
    cpe:2.3:a:mozilla:thunderbird:24.0
  • Mozilla Thunderbird 24.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:24.0:beta1
  • Mozilla Thunderbird 24.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:24.0:beta2
  • Mozilla Thunderbird 24.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:24.0:beta3
  • Mozilla Thunderbird 24.0.1
    cpe:2.3:a:mozilla:thunderbird:24.0.1
  • Mozilla Thunderbird 24.1.0
    cpe:2.3:a:mozilla:thunderbird:24.1.0
  • Mozilla Thunderbird 24.1.1
    cpe:2.3:a:mozilla:thunderbird:24.1.1
  • Mozilla Thunderbird 24.2.0
    cpe:2.3:a:mozilla:thunderbird:24.2.0
  • Mozilla Thunderbird 24.3.0
    cpe:2.3:a:mozilla:thunderbird:24.3.0
  • Mozilla Thunderbird 24.4.0
    cpe:2.3:a:mozilla:thunderbird:24.4.0
  • Mozilla Thunderbird 24.5.0
    cpe:2.3:a:mozilla:thunderbird:24.5.0
  • Mozilla Thunderbird 24.6.0
    cpe:2.3:a:mozilla:thunderbird:24.6.0
  • Mozilla Thunderbird 24.7.0
    cpe:2.3:a:mozilla:thunderbird:24.7.0
  • Mozilla Thunderbird 24.8.0
    cpe:2.3:a:mozilla:thunderbird:24.8.0
  • Mozilla Thunderbird 24.8.1
    cpe:2.3:a:mozilla:thunderbird:24.8.1
  • Mozilla Thunderbird 25.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:25.0:beta1
  • Mozilla Thunderbird 26.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:26.0:beta1
  • Mozilla Thunderbird 27.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:27.0:beta1
  • Mozilla Thunderbird 28.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:28.0:beta1
  • Mozilla Thunderbird 29.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:29.0:beta1
  • Mozilla Thunderbird 30.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:30.0:beta1
  • Mozilla Thunderbird 31.0
    cpe:2.3:a:mozilla:thunderbird:31.0
  • Mozilla Thunderbird 31.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:31.0:beta1
  • Mozilla Thunderbird 31.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:31.0:beta2
  • Mozilla Thunderbird 31.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:31.0:beta3
  • Mozilla Thunderbird 31.1.0
    cpe:2.3:a:mozilla:thunderbird:31.1.0
  • Mozilla Thunderbird 31.1.1
    cpe:2.3:a:mozilla:thunderbird:31.1.1
  • Mozilla Thunderbird 31.1.2
    cpe:2.3:a:mozilla:thunderbird:31.1.2
  • Mozilla Thunderbird 31.2.0
    cpe:2.3:a:mozilla:thunderbird:31.2.0
  • Mozilla Thunderbird 31.3.0
    cpe:2.3:a:mozilla:thunderbird:31.3.0
  • Mozilla Thunderbird 31.4.0
    cpe:2.3:a:mozilla:thunderbird:31.4.0
  • Mozilla Thunderbird 31.5.0
    cpe:2.3:a:mozilla:thunderbird:31.5.0
  • Mozilla Thunderbird 31.6.0
    cpe:2.3:a:mozilla:thunderbird:31.6.0
  • Mozilla Thunderbird 31.7.0
    cpe:2.3:a:mozilla:thunderbird:31.7.0
  • Mozilla Thunderbird 31.8.0
    cpe:2.3:a:mozilla:thunderbird:31.8.0
  • Mozilla Thunderbird 32.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:32.0:beta1
  • Mozilla Thunderbird 33.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:33.0:beta1
  • Mozilla Thunderbird 34.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:34.0:beta1
  • Mozilla Thunderbird 36.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:36.0:beta1
  • Mozilla Thunderbird 37.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:37.0:beta1
  • Mozilla Thunderbird 38.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:38.0:beta1
  • Mozilla Thunderbird 38.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:38.0:beta2
  • Mozilla Thunderbird 38.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:38.0:beta3
  • Mozilla Thunderbird 38.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:38.0:beta4
  • Mozilla Thunderbird 38.0 Beta 5
    cpe:2.3:a:mozilla:thunderbird:38.0:beta5
  • Mozilla Thunderbird 38.0 Beta 6
    cpe:2.3:a:mozilla:thunderbird:38.0:beta6
  • Mozilla Thunderbird 38.0.1
    cpe:2.3:a:mozilla:thunderbird:38.0.1
  • Mozilla Thunderbird 38.1.0
    cpe:2.3:a:mozilla:thunderbird:38.1.0
  • Mozilla Thunderbird 38.2.0
    cpe:2.3:a:mozilla:thunderbird:38.2.0
  • Mozilla Thunderbird 38.3.0
    cpe:2.3:a:mozilla:thunderbird:38.3.0
  • Mozilla Thunderbird 38.4.0
    cpe:2.3:a:mozilla:thunderbird:38.4.0
  • Mozilla Thunderbird 38.5.0
    cpe:2.3:a:mozilla:thunderbird:38.5.0
  • Mozilla Thunderbird 38.5.1
    cpe:2.3:a:mozilla:thunderbird:38.5.1
  • Mozilla Thunderbird 38.6.0
    cpe:2.3:a:mozilla:thunderbird:38.6.0
  • Mozilla Thunderbird 38.7.0
    cpe:2.3:a:mozilla:thunderbird:38.7.0
  • Mozilla Thunderbird 38.7.1
    cpe:2.3:a:mozilla:thunderbird:38.7.1
  • Mozilla Thunderbird 38.7.2
    cpe:2.3:a:mozilla:thunderbird:38.7.2
  • Mozilla Thunderbird 38.8.0
    cpe:2.3:a:mozilla:thunderbird:38.8.0
  • Mozilla Thunderbird 40.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:40.0:beta1
  • Mozilla Thunderbird 41.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:41.0:beta1
  • Mozilla Thunderbird 41.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:41.0:beta2
  • Mozilla Thunderbird 42.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:42.0:beta1
  • Mozilla Thunderbird 42.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:42.0:beta2
  • Mozilla Thunderbird 43.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:43.0:beta1
  • Mozilla Thunderbird 44.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:44.0:beta1
  • Mozilla Thunderbird 45.0
    cpe:2.3:a:mozilla:thunderbird:45.0
  • Mozilla Thunderbird 45.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:45.0:beta1
  • Mozilla Thunderbird 45.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:45.0:beta2
  • Mozilla Thunderbird 45.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:45.0:beta3
  • Mozilla Thunderbird 45.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:45.0:beta4
  • Mozilla Thunderbird 45.1 Beta 1
    cpe:2.3:a:mozilla:thunderbird:45.1:beta1
  • Mozilla Thunderbird 45.1.0
    cpe:2.3:a:mozilla:thunderbird:45.1.0
  • Mozilla Thunderbird 45.1.1
    cpe:2.3:a:mozilla:thunderbird:45.1.1
  • Mozilla Thunderbird 45.2 Beta 1
    cpe:2.3:a:mozilla:thunderbird:45.2:beta1
  • Mozilla Thunderbird 45.2.0
    cpe:2.3:a:mozilla:thunderbird:45.2.0
  • Mozilla Thunderbird 45.3.0
    cpe:2.3:a:mozilla:thunderbird:45.3.0
  • Mozilla Thunderbird 45.4.0
    cpe:2.3:a:mozilla:thunderbird:45.4.0
  • Mozilla Thunderbird 45.5.0
    cpe:2.3:a:mozilla:thunderbird:45.5.0
  • Mozilla Thunderbird 45.5.1
    cpe:2.3:a:mozilla:thunderbird:45.5.1
  • Mozilla Thunderbird 45.6.0
    cpe:2.3:a:mozilla:thunderbird:45.6.0
  • Mozilla Thunderbird 45.7.0
    cpe:2.3:a:mozilla:thunderbird:45.7.0
  • Mozilla Thunderbird 45.7.1
    cpe:2.3:a:mozilla:thunderbird:45.7.1
  • Mozilla Thunderbird 45.8.0
    cpe:2.3:a:mozilla:thunderbird:45.8.0
  • Mozilla Thunderbird 47.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:47.0:beta1
  • Mozilla Thunderbird 47.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:47.0:beta2
  • Mozilla Thunderbird 49.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:49.0:beta1
  • Mozilla Thunderbird 50.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:50.0:beta1
  • Mozilla Thunderbird 50.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:50.0:beta2
  • Mozilla Thunderbird 50.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:50.0:beta3
  • Mozilla Thunderbird 51.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:51.0:beta1
  • Mozilla Thunderbird 51.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:51.0:beta2
  • Mozilla Thunderbird 52.0
    cpe:2.3:a:mozilla:thunderbird:52.0
  • Mozilla Thunderbird 52.0 Beta 1
    cpe:2.3:a:mozilla:thunderbird:52.0:beta1
  • Mozilla Thunderbird 52.0 Beta 2
    cpe:2.3:a:mozilla:thunderbird:52.0:beta2
  • Mozilla Thunderbird 52.0 Beta 3
    cpe:2.3:a:mozilla:thunderbird:52.0:beta3
  • Mozilla Thunderbird 52.0 Beta 4
    cpe:2.3:a:mozilla:thunderbird:52.0:beta4
  • Mozilla Thunderbird 52.0.1
    cpe:2.3:a:mozilla:thunderbird:52.0.1
  • Mozilla Thunderbird 52.1.0
    cpe:2.3:a:mozilla:thunderbird:52.1.0
  • Mozilla Thunderbird 52.1.1
    cpe:2.3:a:mozilla:thunderbird:52.1.1
  • Mozilla Thunderbird 52.2.0
    cpe:2.3:a:mozilla:thunderbird:52.2.0
  • Mozilla Thunderbird 52.2.1
    cpe:2.3:a:mozilla:thunderbird:52.2.1
  • Mozilla Thunderbird 52.3.0
    cpe:2.3:a:mozilla:thunderbird:52.3.0
  • Mozilla Thunderbird 52.4.0
    cpe:2.3:a:mozilla:thunderbird:52.4.0
  • Mozilla Thunderbird 52.5.0
    cpe:2.3:a:mozilla:thunderbird:52.5.0
  • Mozilla Thunderbird 52.5.2
    cpe:2.3:a:mozilla:thunderbird:52.5.2
  • Mozilla Thunderbird 52.6.0
    cpe:2.3:a:mozilla:thunderbird:52.6.0
  • Mozilla Thunderbird 52.7.0
    cpe:2.3:a:mozilla:thunderbird:52.7.0
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0
    cpe:2.3:a:mozilla:thunderbird_esr:10.0
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.1
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.1
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.2
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.2
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.3
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.3
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.4
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.4
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.5
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.5
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.6
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.6
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.7
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.7
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.8
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.8
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.9
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.9
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.10
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.10
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.11
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.11
  • Mozilla Thunderbird Extended Support Release (ESR) 10.0.12
    cpe:2.3:a:mozilla:thunderbird_esr:10.0.12
  • Mozilla Thunderbird Extended Support Release (ESR) 17.0
    cpe:2.3:a:mozilla:thunderbird_esr:17.0
  • Mozilla Thunderbird Extended Support Release (ESR) 17.0.2
    cpe:2.3:a:mozilla:thunderbird_esr:17.0.2
  • Mozilla Thunderbird Extended Support Release (ESR) 17.0.3
    cpe:2.3:a:mozilla:thunderbird_esr:17.0.3
  • Mozilla Thunderbird Extended Support Release (ESR) 17.0.4
    cpe:2.3:a:mozilla:thunderbird_esr:17.0.4
  • Mozilla Thunderbird Extended Support Release (ESR) 17.0.5
    cpe:2.3:a:mozilla:thunderbird_esr:17.0.5
  • Mozilla Thunderbird Extended Support Release (ESR) 17.0.6
    cpe:2.3:a:mozilla:thunderbird_esr:17.0.6
  • Mozilla Thunderbird Extended Support Release (ESR) 17.0.7
    cpe:2.3:a:mozilla:thunderbird_esr:17.0.7
  • Mozilla Thunderbird Extended Support Release (ESR) 17.0.8
    cpe:2.3:a:mozilla:thunderbird_esr:17.0.8
  • Mozilla Thunderbird Extended Support Release (ESR) 17.0.9
    cpe:2.3:a:mozilla:thunderbird_esr:17.0.9
  • Mozilla Thunderbird Extended Support Release (ESR) 17.0.10
    cpe:2.3:a:mozilla:thunderbird_esr:17.0.10
  • Mozilla Thunderbird Extended Support Release (ESR) 17.0.11
    cpe:2.3:a:mozilla:thunderbird_esr:17.0.11
CVSS
Base: 7.5
Impact:
Exploitability:
CWE CWE-119
CAPEC
  • Buffer Overflow via Environment Variables
    This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.
  • Overflow Buffers
    Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.
  • Client-side Injection-induced Buffer Overflow
    This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service.
  • Filter Failure through Buffer Overflow
    In this attack, the idea is to cause an active filter to fail by causing an oversized transaction. An attacker may try to feed overly long input strings to the program in an attempt to overwhelm the filter (by causing a buffer overflow) and hoping that the filter does not fail securely (i.e. the user input is let into the system unfiltered).
  • MIME Conversion
    An attacker exploits a weakness in the MIME conversion routine to cause a buffer overflow and gain control over the mail server machine. The MIME system is designed to allow various different information formats to be interpreted and sent via e-mail. Attack points exist when data are converted to MIME compatible format and back.
  • Overflow Binary Resource File
    An attack of this type exploits a buffer overflow vulnerability in the handling of binary resources. Binary resources may include music files like MP3, image files like JPEG files, and any other binary file. These attacks may pass unnoticed to the client machine through normal usage of files, such as a browser loading a seemingly innocent JPEG file. This can allow the attacker access to the execution stack and execute arbitrary code in the target process. This attack pattern is a variant of standard buffer overflow attacks using an unexpected vector (binary files) to wrap its attack and open up a new attack vector. The attacker is required to either directly serve the binary content to the victim, or place it in a locale like a MP3 sharing application, for the victim to download. The attacker then is notified upon the download or otherwise locates the vulnerability opened up by the buffer overflow.
  • Buffer Overflow via Symbolic Links
    This type of attack leverages the use of symbolic links to cause buffer overflows. An attacker can try to create or manipulate a symbolic link file such that its contents result in out of bounds data. When the target software processes the symbolic link file, it could potentially overflow internal buffers with insufficient bounds checking.
  • Overflow Variables and Tags
    This type of attack leverages the use of tags or variables from a formatted configuration data to cause buffer overflow. The attacker crafts a malicious HTML page or configuration file that includes oversized strings, thus causing an overflow.
  • Buffer Overflow via Parameter Expansion
    In this attack, the target software is given input that the attacker knows will be modified and expanded in size during processing. This attack relies on the target software failing to anticipate that the expanded data may exceed some internal limit, thereby creating a buffer overflow.
  • Buffer Overflow in an API Call
    This attack targets libraries or shared code modules which are vulnerable to buffer overflow attacks. An attacker who has access to an API may try to embed malicious code in the API function call and exploit a buffer overflow vulnerability in the function's implementation. All clients that make use of the code library thus become vulnerable by association. This has a very broad effect on security across a system, usually affecting more than one software process.
  • Buffer Overflow in Local Command-Line Utilities
    This attack targets command-line utilities available in a number of shells. An attacker can leverage a vulnerability found in a command-line utility to escalate privilege to root.
nessus via4
  • NASL family Huawei Local Security Checks
    NASL id EULEROS_SA-2018-1189.NASL
    description According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code.(CVE-2018-5146) - Use-after-free in compositor potentially allows code execution (CVE-2018-5148) - Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) - Backport critical security fixes in Skia (CVE-2018-5183) - Use-after-free with SVG animations and clip paths (CVE-2018-5154) - Use-after-free with SVG animations and text paths (CVE-2018-5155) - Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157) - Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158) - Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) - Lightweight themes can be installed without user interaction (CVE-2018-5168) - Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-13
    plugin id 110853
    published 2018-07-03
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110853
    title EulerOS 2.0 SP3 : firefox (EulerOS-SA-2018-1189)
  • NASL family FreeBSD Local Security Checks
    NASL id FREEBSD_PKG_5AEFC41ED3044EC88C82824F84F08244.NASL
    description Mozilla Foundation reports : CVE-2018-5183: Backport critical security fixes in Skia CVE-2018-5154: Use-after-free with SVG animations and clip paths CVE-2018-5155: Use-after-free with SVG animations and text paths CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer CVE-2018-5159: Integer overflow and out-of-bounds write in Skia CVE-2018-5160: Uninitialized memory use by WebRTC encoder CVE-2018-5152: WebExtensions information leak through webRequest API CVE-2018-5153: Out-of-bounds read in mixed content websocket messages CVE-2018-5163: Replacing cached data in JavaScript Start-up Bytecode Cache CVE-2018-5164: CSP not applied to all multipart content sent with multipart/x-mixed-replace CVE-2018-5166: WebExtension host permission bypass through filterReponseData CVE-2018-5167: Improper linkification of chrome: and javascript: content in web console and JavaScript debugger CVE-2018-5168: Lightweight themes can be installed without user interaction CVE-2018-5169: Dragging and dropping link text onto home button can set home page to include chrome pages CVE-2018-5172: Pasted script from clipboard can run in the Live Bookmarks page or PDF viewer CVE-2018-5173: File name spoofing of Downloads panel with Unicode characters CVE-2018-5174: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update CVE-2018-5175: Universal CSP bypass on sites using strict-dynamic in their policies CVE-2018-5176: JSON Viewer script injection CVE-2018-5177: Buffer overflow in XSLT during number formatting CVE-2018-5165: Checkbox for enabling Flash protected mode is inverted in 32-bit Firefox CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension CVE-2018-5180: heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced CVE-2018-5181: Local file can be displayed in noopener tab through drag and drop of hyperlink CVE-2018-5182: Local file can be displayed from hyperlink dragged and dropped on addressbar CVE-2018-5151: Memory safety bugs fixed in Firefox 60 CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
    last seen 2019-02-21
    modified 2018-11-21
    plugin id 109661
    published 2018-05-10
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109661
    title FreeBSD : mozilla -- multiple vulnerabilities (5aefc41e-d304-4ec8-8c82-824f84f08244)
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2018-1319-1.NASL
    description This update for MozillaFirefox to ESR 52.8 release fixes the following issues: Update to Firefox ESR 52.8 (bsc#1092548) Security issues fixed : - MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer - MFSA 2018-12/CVE-2018-5168: Lightweight themes can be installed without user interaction - MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 - MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG animations and text paths - MFSA 2018-12/CVE-2018-5183: Backport critical security fixes in Skia - MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files - MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG animations and clip paths - MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-12-01
    plugin id 109887
    published 2018-05-17
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109887
    title SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2018:1319-1)
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-201811-13.NASL
    description The remote host is affected by the vulnerability described in GLSA-201811-13 (Mozilla Thunderbird: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Mozilla Thunderbird. Please review the referenced Mozilla Foundation Security Advisories and CVE identifiers below for details. Impact : A remote attacker may be able to execute arbitrary code, cause a Denial of Service condition, obtain sensitive information, or conduct Cross-Site Request Forgery (CSRF). Workaround : There is no known workaround at this time.
    last seen 2019-02-21
    modified 2018-11-26
    plugin id 119133
    published 2018-11-26
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=119133
    title GLSA-201811-13 : Mozilla Thunderbird: Multiple vulnerabilities
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2018-2298-1.NASL
    description This update for MozillaFirefox to the 52.9 ESR release fixes the following issues: These security issues were fixed : - Firefox ESR 52.9 : - CVE-2018-5188 Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9 (bsc#1098998). - CVE-2018-12368 No warning when opening executable SettingContent-ms files (bsc#1098998). - CVE-2018-12366 Invalid data handling during QCMS transformations (bsc#1098998). - CVE-2018-12365 Compromised IPC child process can list local filenames (bsc#1098998). - CVE-2018-12364 CSRF attacks through 307 redirects and NPAPI plugins (bsc#1098998). - CVE-2018-12363 Use-after-free when appending DOM nodes (bsc#1098998). - CVE-2018-12362 Integer overflow in SSSE3 scaler (bsc#1098998). - CVE-2018-12360 Use-after-free when using focus() (bsc#1098998). - CVE-2018-5156 Media recorder segmentation fault when track type is changed during capture (bsc#1098998). - CVE-2018-12359 Buffer overflow using computed size of canvas element (bsc#1098998). - Firefox ESR 52.8 : - CVE-2018-6126: Prevent heap buffer overflow in rasterizing paths in SVG with Skia (bsc#1096449). - CVE-2018-5183: Backport critical security fixes in Skia (bsc#1092548). - CVE-2018-5154: Use-after-free with SVG animations and clip paths (bsc#1092548). - CVE-2018-5155: Use-after-free with SVG animations and text paths (bsc#1092548). - CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files (bsc#1092548). - CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer (bsc#1092548). - CVE-2018-5159: Integer overflow and out-of-bounds write in Skia (bsc#1092548). - CVE-2018-5168: Lightweight themes can be installed without user interaction (bsc#1092548). - CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (bsc#1092548). - CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (bsc#1092548). The update package also includes non-security fixes. See advisory for details. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2019-01-02
    plugin id 120074
    published 2019-01-02
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=120074
    title SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2018:2298-1)
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2018-1334-2.NASL
    description This update for MozillaFirefox to the ESR 52.8 release fixes the following issues : Mozil to Firefox ESR 52.8 (bsc#1092548) Security issues fixed : MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer MFSA 2018-12/CVE-2018-5168: Lightweight themes can be installed without user interaction MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG animations and text paths MFSA 2018-12/CVE-2018-5183: Backport critical security fixes in Skia MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG animations and clip paths MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-12-01
    plugin id 118254
    published 2018-10-22
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=118254
    title SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:1334-2)
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2018-1334-1.NASL
    description This update for MozillaFirefox to the ESR 52.8 release fixes the following issues: Mozil to Firefox ESR 52.8 (bsc#1092548) Security issues fixed : - MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer - MFSA 2018-12/CVE-2018-5168: Lightweight themes can be installed without user interaction - MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 - MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG animations and text paths - MFSA 2018-12/CVE-2018-5183: Backport critical security fixes in Skia - MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files - MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG animations and clip paths - MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-12-01
    plugin id 109939
    published 2018-05-21
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109939
    title SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:1334-1)
  • NASL family Windows
    NASL id MOZILLA_THUNDERBIRD_52_8.NASL
    description The version of Mozilla Thunderbird installed on the remote Windows host is prior to 52.8 It is, therefore, affected by multiple vulnerabilities.
    last seen 2019-02-21
    modified 2018-06-29
    plugin id 109946
    published 2018-05-22
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109946
    title Mozilla Thunderbird < 52.8 Multiple Vulnerabilities (EFAIL)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20180524_THUNDERBIRD_ON_SL7_X.NASL
    description This update upgrades Thunderbird to version 52.8.0. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) - Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) - Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) - Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) - Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) - Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack (CVE-2018-5184) - Mozilla: Hang via malformed headers (CVE-2018-5161) - Mozilla: Encrypted mail leaks plaintext through src attribute (CVE-2018-5162) - Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) - Mozilla: Filename spoofing for external attachments (CVE-2018-5170) - Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) - Mozilla: Leaking plaintext through HTML forms (CVE-2018-5185)
    last seen 2019-02-21
    modified 2018-12-27
    plugin id 110122
    published 2018-05-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110122
    title Scientific Linux Security Update : thunderbird on SL7.x x86_64
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2018-1415.NASL
    description An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 52.8.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157) * Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Wladimir Palant, Ivan Fratric, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 109835
    published 2018-05-16
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109835
    title RHEL 7 : firefox (RHSA-2018:1415)
  • NASL family Windows
    NASL id MOZILLA_FIREFOX_52_8_ESR.NASL
    description The version of Mozilla Firefox ESR installed on the remote Windows host is prior to 52.8. It is, therefore, affected by multiple critical and high severity vulnerabilities.
    last seen 2019-02-21
    modified 2018-08-10
    plugin id 109868
    published 2018-05-17
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109868
    title Mozilla Firefox ESR < 52.8 Multiple Critical Vulnerabilities
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2018-452.NASL
    description This update for Mozilla Firefox to 52.8.0 ESR fixes the following issues: Security issssue fixed: (bsc#1092548, MFSA 2018-12) : - CVE-2018-5183: Backport critical security fixes in Skia - CVE-2018-5154: Use-after-free with SVG animations and clip paths - CVE-2018-5155: Use-after-free with SVG animations and text paths - CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files - CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer - CVE-2018-5159: Integer overflow and out-of-bounds write in Skia - CVE-2018-5168: Lightweight themes can be installed without user interaction - CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension - CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 The following non-security changes are included : - Various stability and regression fixes - Performance improvements to the Safe Browsing service to avoid slowdowns while updating site classification data
    last seen 2019-02-21
    modified 2018-09-04
    plugin id 109720
    published 2018-05-11
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109720
    title openSUSE Security Update : Mozilla Firefox (openSUSE-2018-452)
  • NASL family Huawei Local Security Checks
    NASL id EULEROS_SA-2018-1125.NASL
    description According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use-after-free in compositor potentially allows code execution (CVE-2018-5148) - Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) - Backport critical security fixes in Skia (CVE-2018-5183) - Use-after-free with SVG animations and clip paths (CVE-2018-5154) - Use-after-free with SVG animations and text paths (CVE-2018-5155) - Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157) - Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158) - Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) - Lightweight themes can be installed without user interaction (CVE-2018-5168) - Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-13
    plugin id 110129
    published 2018-05-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110129
    title EulerOS 2.0 SP1 : firefox (EulerOS-SA-2018-1125)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2018-1414.NASL
    description From Red Hat Security Advisory 2018:1414 : An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 52.8.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157) * Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Wladimir Palant, Ivan Fratric, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-09-05
    plugin id 109809
    published 2018-05-15
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109809
    title Oracle Linux 6 : firefox (ELSA-2018-1414)
  • NASL family MacOS X Local Security Checks
    NASL id MACOS_FIREFOX_52_8_ESR.NASL
    description The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.8. It is, therefore, affected by multiple critical and high severity vulnerabilities.
    last seen 2019-02-21
    modified 2018-08-10
    plugin id 109866
    published 2018-05-17
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109866
    title Mozilla Firefox ESR < 52.8 Multiple Critical Vulnerabilities (macOS)
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-201810-01.NASL
    description The remote host is affected by the vulnerability described in GLSA-201810-01 (Mozilla Firefox: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the referenced CVE identifiers for details. Impact : A remote attacker could entice a user to view a specially crafted web page, possibly resulting in the execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to perform Man-in-the-Middle attacks, obtain sensitive information, spoof the address bar, conduct clickjacking attacks, bypass security restrictions and protection mechanisms, or have other unspecified impact. Workaround : There is no known workaround at this time.
    last seen 2019-02-21
    modified 2018-12-07
    plugin id 117894
    published 2018-10-03
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=117894
    title GLSA-201810-01 : Mozilla Firefox: Multiple vulnerabilities
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2018-1414.NASL
    description An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 52.8.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157) * Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Wladimir Palant, Ivan Fratric, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 109834
    published 2018-05-16
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109834
    title RHEL 6 : firefox (RHSA-2018:1414)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2018-1415.NASL
    description From Red Hat Security Advisory 2018:1415 : An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 52.8.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157) * Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Wladimir Palant, Ivan Fratric, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-09-05
    plugin id 109810
    published 2018-05-15
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109810
    title Oracle Linux 7 : firefox (ELSA-2018-1415)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20180515_FIREFOX_ON_SL7_X.NASL
    description This update upgrades Firefox to version 52.8.0 ESR. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) - Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) - Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) - Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) - Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157) - Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158) - Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) - Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) - Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178)
    last seen 2019-02-21
    modified 2018-12-27
    plugin id 109852
    published 2018-05-16
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109852
    title Scientific Linux Security Update : firefox on SL7.x x86_64
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2018-1726.NASL
    description An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.8.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack (CVE-2018-5184) * Mozilla: Hang via malformed headers (CVE-2018-5161) * Mozilla: Encrypted mail leaks plaintext through src attribute (CVE-2018-5162) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Filename spoofing for external attachments (CVE-2018-5170) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) * Mozilla: Leaking plaintext through HTML forms (CVE-2018-5185) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting CVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5159, CVE-2018-5168, CVE-2018-5178, and CVE-2018-5183. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Ivan Fratric, Wladimir Palant, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 110120
    published 2018-05-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110120
    title RHEL 6 : thunderbird (RHSA-2018:1726)
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DLA-1376.NASL
    description Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code or denial of service. For Debian 7 'Wheezy', these problems have been fixed in version 52.8.0esr-1~deb7u1. We recommend that you upgrade your firefox-esr packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-08-31
    plugin id 109736
    published 2018-05-14
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109736
    title Debian DLA-1376-1 : firefox-esr security update
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2018-1414.NASL
    description An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 52.8.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157) * Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Wladimir Palant, Ivan Fratric, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 109923
    published 2018-05-21
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109923
    title CentOS 6 : firefox (CESA-2018:1414)
  • NASL family Huawei Local Security Checks
    NASL id EULEROS_SA-2018-1126.NASL
    description According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use-after-free in compositor potentially allows code execution (CVE-2018-5148) - Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) - Backport critical security fixes in Skia (CVE-2018-5183) - Use-after-free with SVG animations and clip paths (CVE-2018-5154) - Use-after-free with SVG animations and text paths (CVE-2018-5155) - Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157) - Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158) - Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) - Lightweight themes can be installed without user interaction (CVE-2018-5168) - Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-13
    plugin id 110130
    published 2018-05-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110130
    title EulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1126)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20180515_FIREFOX_ON_SL6_X.NASL
    description This update upgrades Firefox to version 52.8.0 ESR. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) - Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) - Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) - Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) - Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157) - Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158) - Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) - Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) - Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178)
    last seen 2019-02-21
    modified 2018-12-27
    plugin id 109851
    published 2018-05-16
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109851
    title Scientific Linux Security Update : firefox on SL6.x i386/x86_64
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2018-1725.NASL
    description An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.8.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack (CVE-2018-5184) * Mozilla: Hang via malformed headers (CVE-2018-5161) * Mozilla: Encrypted mail leaks plaintext through src attribute (CVE-2018-5162) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Filename spoofing for external attachments (CVE-2018-5170) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) * Mozilla: Leaking plaintext through HTML forms (CVE-2018-5185) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting CVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5159, CVE-2018-5168, CVE-2018-5178, and CVE-2018-5183. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Ivan Fratric, Wladimir Palant, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 110119
    published 2018-05-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110119
    title RHEL 7 : thunderbird (RHSA-2018:1725)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2018-1725.NASL
    description An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.8.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack (CVE-2018-5184) * Mozilla: Hang via malformed headers (CVE-2018-5161) * Mozilla: Encrypted mail leaks plaintext through src attribute (CVE-2018-5162) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Filename spoofing for external attachments (CVE-2018-5170) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) * Mozilla: Leaking plaintext through HTML forms (CVE-2018-5185) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting CVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5159, CVE-2018-5168, CVE-2018-5178, and CVE-2018-5183. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Ivan Fratric, Wladimir Palant, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 110205
    published 2018-05-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110205
    title CentOS 7 : thunderbird (CESA-2018:1725)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20180524_THUNDERBIRD_ON_SL6_X.NASL
    description This update upgrades Thunderbird to version 52.8.0. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) - Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) - Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) - Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) - Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) - Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack (CVE-2018-5184) - Mozilla: Hang via malformed headers (CVE-2018-5161) - Mozilla: Encrypted mail leaks plaintext through src attribute (CVE-2018-5162) - Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) - Mozilla: Filename spoofing for external attachments (CVE-2018-5170) - Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) - Mozilla: Leaking plaintext through HTML forms (CVE-2018-5185)
    last seen 2019-02-21
    modified 2018-12-27
    plugin id 110121
    published 2018-05-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110121
    title Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2018-1415.NASL
    description An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 52.8.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157) * Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Wladimir Palant, Ivan Fratric, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 110248
    published 2018-05-31
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110248
    title CentOS 7 : firefox (CESA-2018:1415)
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DSA-4199.NASL
    description Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code or denial of service.
    last seen 2019-02-21
    modified 2018-11-13
    plugin id 109739
    published 2018-05-14
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109739
    title Debian DSA-4199-1 : firefox-esr - security update
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2018-486.NASL
    description This update for Mozilla Thunderbird to version 52.8 fixes the following issues : Security issues fixed (MFSA 2018-13, boo#1092548) : - CVE-2018-5183: Backport critical security fixes in Skia - CVE-2018-5154: Use-after-free with SVG animations and clip paths - CVE-2018-5155: Use-after-free with SVG animations and text paths - CVE-2018-5159: Integer overflow and out-of-bounds write in Skia - CVE-2018-5168: Lightweight themes can be installed without user interaction - CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension - CVE-2018-5150: Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8, and Thunderbird 52.8 - CVE-2018-5161: Hang via malformed headers (bsc#1093970) - CVE-2018-5162: Encrypted mail leaks plaintext through src attribute (bsc#1093971) - CVE-2018-5170: Filename spoofing for external attachments (bsc#1093972) - CVE-2018-5184: Full plaintext recovery in S/MIME via chosen-ciphertext attack (bsc#1093969) - CVE-2018-5185: Leaking plaintext through HTML forms (bsc#1093973)
    last seen 2019-02-21
    modified 2018-09-04
    plugin id 109935
    published 2018-05-21
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=109935
    title openSUSE Security Update : Mozilla Thunderbird (openSUSE-2018-486)
  • NASL family Ubuntu Local Security Checks
    NASL id UBUNTU_USN-3660-1.NASL
    description Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service via application crash, install lightweight themes without user interaction, or execute arbitrary code. (CVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5159, CVE-2018-5168, CVE-2018-5178) An issue was discovered when processing message headers in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit this to cause a denial of service via application hang. (CVE-2018-5161) It was discovered encrypted messages could leak plaintext via the src attribute of remote images or links. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-5162) It was discovered that the filename of an attachment could be spoofed. An attacker could potentially exploit this by tricking the user in to opening an attachment of a different type to the one expected. (CVE-2018-5170) Multiple security issues were discovered in Skia. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code. (CVE-2018-5183) It was discovered that S/MIME encrypted messages with remote content could leak plaintext via a chosen-ciphertext attack. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-5184) It was discovered that plaintext of decrypted emails could leak by submitting an embedded form. An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-5185). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-12-01
    plugin id 110191
    published 2018-05-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110191
    title Ubuntu 14.04 LTS / 16.04 LTS / 17.10 / 18.04 LTS : thunderbird vulnerabilities (USN-3660-1)
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DLA-1382.NASL
    description Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or attacks on encrypted emails. For Debian 7 'Wheezy', these problems have been fixed in version 1:52.8.0-1~deb7u1. We recommend that you upgrade your thunderbird packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-08-31
    plugin id 110158
    published 2018-05-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110158
    title Debian DLA-1382-1 : thunderbird security update
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2018-1725.NASL
    description From Red Hat Security Advisory 2018:1725 : An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.8.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack (CVE-2018-5184) * Mozilla: Hang via malformed headers (CVE-2018-5161) * Mozilla: Encrypted mail leaks plaintext through src attribute (CVE-2018-5162) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Filename spoofing for external attachments (CVE-2018-5170) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) * Mozilla: Leaking plaintext through HTML forms (CVE-2018-5185) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting CVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5159, CVE-2018-5168, CVE-2018-5178, and CVE-2018-5183. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Ivan Fratric, Wladimir Palant, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-09-05
    plugin id 110108
    published 2018-05-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110108
    title Oracle Linux 7 : thunderbird (ELSA-2018-1725)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2018-1726.NASL
    description An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.8.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack (CVE-2018-5184) * Mozilla: Hang via malformed headers (CVE-2018-5161) * Mozilla: Encrypted mail leaks plaintext through src attribute (CVE-2018-5162) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Filename spoofing for external attachments (CVE-2018-5170) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) * Mozilla: Leaking plaintext through HTML forms (CVE-2018-5185) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting CVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5159, CVE-2018-5168, CVE-2018-5178, and CVE-2018-5183. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Ivan Fratric, Wladimir Palant, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 110206
    published 2018-05-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110206
    title CentOS 6 : thunderbird (CESA-2018:1726)
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DSA-4209.NASL
    description Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or attacks on encrypted emails.
    last seen 2019-02-21
    modified 2018-11-13
    plugin id 110101
    published 2018-05-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110101
    title Debian DSA-4209-1 : thunderbird - security update
  • NASL family Amazon Linux Local Security Checks
    NASL id AL2_ALAS-2018-1032.NASL
    description The following CVEs are fixed in the updated thunderbird package : CVE-2018-5161 : Hang via malformed headers CVE-2018-5162 : Encrypted mail leaks plaintext through src attribute CVE-2018-5183 : Backport critical security fixes in Skia CVE-2018-5155 : Use-after-free with SVG animations and text paths CVE-2018-5170 : Filename spoofing for external attachments CVE-2018-5184 : Full plaintext recovery in S/MIME via chosen-ciphertext attack CVE-2018-5159 : Integer overflow and out-of-bounds write in Skia CVE-2018-5178 : Buffer overflow during UTF-8 to Unicode string conversion through legacy extension CVE-2018-5168 : Lightweight themes can be installed without user interaction CVE-2018-5150 : Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 CVE-2018-5154 : Use-after-free with SVG animations and clip paths CVE-2018-5185 : Leaking plaintext through HTML forms
    last seen 2019-02-21
    modified 2018-08-31
    plugin id 110449
    published 2018-06-12
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110449
    title Amazon Linux 2 : thunderbird (ALAS-2018-1032)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2018-1726.NASL
    description From Red Hat Security Advisory 2018:1726 : An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.8.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150) * Mozilla: Backport critical security fixes in Skia (CVE-2018-5183) * Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154) * Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155) * Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159) * Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack (CVE-2018-5184) * Mozilla: Hang via malformed headers (CVE-2018-5161) * Mozilla: Encrypted mail leaks plaintext through src attribute (CVE-2018-5162) * Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168) * Mozilla: Filename spoofing for external attachments (CVE-2018-5170) * Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178) * Mozilla: Leaking plaintext through HTML forms (CVE-2018-5185) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting CVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5159, CVE-2018-5168, CVE-2018-5178, and CVE-2018-5183. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Ivan Fratric, Wladimir Palant, and Root Object as the original reporters.
    last seen 2019-02-21
    modified 2018-09-05
    plugin id 110109
    published 2018-05-25
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=110109
    title Oracle Linux 6 : thunderbird (ELSA-2018-1726)
redhat via4
advisories
  • bugzilla
    id 1576283
    title CVE-2018-5183 Mozilla: Backport critical security fixes in Skia
    oval
    AND
    • comment firefox is earlier than 0:52.8.0-1.el6_9
      oval oval:com.redhat.rhsa:tst:20181414005
    • comment firefox is signed with Red Hat redhatrelease2 key
      oval oval:com.redhat.rhsa:tst:20100861010
    • OR
      • comment Red Hat Enterprise Linux 6 Client is installed
        oval oval:com.redhat.rhsa:tst:20100842001
      • comment Red Hat Enterprise Linux 6 Server is installed
        oval oval:com.redhat.rhsa:tst:20100842002
      • comment Red Hat Enterprise Linux 6 Workstation is installed
        oval oval:com.redhat.rhsa:tst:20100842003
      • comment Red Hat Enterprise Linux 6 ComputeNode is installed
        oval oval:com.redhat.rhsa:tst:20100842004
    rhsa
    id RHSA-2018:1414
    released 2018-05-14
    severity Critical
    title RHSA-2018:1414: firefox security update (Critical)
  • bugzilla
    id 1576283
    title CVE-2018-5183 Mozilla: Backport critical security fixes in Skia
    oval
    AND
    • comment firefox is earlier than 0:52.8.0-1.el7_5
      oval oval:com.redhat.rhsa:tst:20181415005
    • comment firefox is signed with Red Hat redhatrelease2 key
      oval oval:com.redhat.rhsa:tst:20100861010
    • OR
      • comment Red Hat Enterprise Linux 7 Client is installed
        oval oval:com.redhat.rhsa:tst:20140675001
      • comment Red Hat Enterprise Linux 7 Server is installed
        oval oval:com.redhat.rhsa:tst:20140675002
      • comment Red Hat Enterprise Linux 7 Workstation is installed
        oval oval:com.redhat.rhsa:tst:20140675003
      • comment Red Hat Enterprise Linux 7 ComputeNode is installed
        oval oval:com.redhat.rhsa:tst:20140675004
    rhsa
    id RHSA-2018:1415
    released 2018-05-14
    severity Critical
    title RHSA-2018:1415: firefox security update (Critical)
  • rhsa
    id RHSA-2018:1725
  • rhsa
    id RHSA-2018:1726
rpms
  • firefox-0:52.8.0-1.el6_9
  • firefox-0:52.8.0-1.el7_5
  • thunderbird-0:52.8.0-1.el7_5
  • thunderbird-0:52.8.0-2.el6_9
refmap via4
bid 104138
confirm
debian
  • DSA-4199
  • DSA-4209
gentoo
  • GLSA-201810-01
  • GLSA-201811-13
mlist
  • [debian-lts-announce] 20180511 [SECURITY] [DLA 1376-1] firefox-esr security update
  • [debian-lts-announce] 20180525 [SECURITY] [DLA 1382-1] thunderbird security update
sectrack 1040898
ubuntu USN-3660-1
Last major update 11-06-2018 - 17:29
Published 11-06-2018 - 17:29
Last modified 13-03-2019 - 09:24
Back to Top