{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Firefox ESR versions ant\u00e9rieures \u00e0 52.2",
      "product": {
        "name": "Firefox",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Firefox versions ant\u00e9rieures \u00e0 54",
      "product": {
        "name": "Firefox",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-7759",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7759"
    },
    {
      "name": "CVE-2017-7770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7770"
    },
    {
      "name": "CVE-2017-7763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7763"
    },
    {
      "name": "CVE-2017-7752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7752"
    },
    {
      "name": "CVE-2017-5472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5472"
    },
    {
      "name": "CVE-2017-7760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7760"
    },
    {
      "name": "CVE-2017-7772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7772"
    },
    {
      "name": "CVE-2017-7777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7777"
    },
    {
      "name": "CVE-2017-7765",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7765"
    },
    {
      "name": "CVE-2017-7778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7778"
    },
    {
      "name": "CVE-2017-7776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7776"
    },
    {
      "name": "CVE-2017-7757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7757"
    },
    {
      "name": "CVE-2017-7758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7758"
    },
    {
      "name": "CVE-2017-7771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7771"
    },
    {
      "name": "CVE-2017-7762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7762"
    },
    {
      "name": "CVE-2017-7767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7767"
    },
    {
      "name": "CVE-2017-7775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7775"
    },
    {
      "name": "CVE-2017-7768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7768"
    },
    {
      "name": "CVE-2017-7750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7750"
    },
    {
      "name": "CVE-2017-7761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7761"
    },
    {
      "name": "CVE-2017-7754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7754"
    },
    {
      "name": "CVE-2017-7773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7773"
    },
    {
      "name": "CVE-2017-7749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7749"
    },
    {
      "name": "CVE-2017-7764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7764"
    },
    {
      "name": "CVE-2017-7751",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7751"
    },
    {
      "name": "CVE-2017-5470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5470"
    },
    {
      "name": "CVE-2017-7756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7756"
    },
    {
      "name": "CVE-2017-7766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7766"
    },
    {
      "name": "CVE-2017-7755",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7755"
    },
    {
      "name": "CVE-2017-5471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5471"
    },
    {
      "name": "CVE-2017-7774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7774"
    }
  ],
  "links": [],
  "reference": "CERTFR-2017-AVI-174",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2017-06-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMozilla Firefox\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Firefox",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2017-16 du 13 juin 2017",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2017-15 du 13 juin 2017",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eMozilla Thunderbird versions ant\u00e9rieures \u00e0 52.2\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-7763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7763"
    },
    {
      "name": "CVE-2017-7752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7752"
    },
    {
      "name": "CVE-2017-5472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5472"
    },
    {
      "name": "CVE-2017-7772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7772"
    },
    {
      "name": "CVE-2017-7777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7777"
    },
    {
      "name": "CVE-2017-7765",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7765"
    },
    {
      "name": "CVE-2017-7778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7778"
    },
    {
      "name": "CVE-2017-7776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7776"
    },
    {
      "name": "CVE-2017-7757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7757"
    },
    {
      "name": "CVE-2017-7758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7758"
    },
    {
      "name": "CVE-2017-7771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7771"
    },
    {
      "name": "CVE-2017-7775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7775"
    },
    {
      "name": "CVE-2017-7750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7750"
    },
    {
      "name": "CVE-2017-7754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7754"
    },
    {
      "name": "CVE-2017-7773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7773"
    },
    {
      "name": "CVE-2017-7749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7749"
    },
    {
      "name": "CVE-2017-7764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7764"
    },
    {
      "name": "CVE-2017-7751",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7751"
    },
    {
      "name": "CVE-2017-5470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5470"
    },
    {
      "name": "CVE-2017-7756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7756"
    },
    {
      "name": "CVE-2017-7774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7774"
    }
  ],
  "links": [],
  "reference": "CERTFR-2017-AVI-182",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2017-06-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMozilla Thunderbird\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un\ncontournement de la politique de s\u00e9curit\u00e9 et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Thunderbird",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2017-17 du 14 juin 2017",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-17/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Firefox ESR versions ant\u00e9rieures \u00e0 52.2",
      "product": {
        "name": "Firefox",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    },
    {
      "description": "Firefox versions ant\u00e9rieures \u00e0 54",
      "product": {
        "name": "Firefox",
        "vendor": {
          "name": "Mozilla",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-7759",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7759"
    },
    {
      "name": "CVE-2017-7770",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7770"
    },
    {
      "name": "CVE-2017-7763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7763"
    },
    {
      "name": "CVE-2017-7752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7752"
    },
    {
      "name": "CVE-2017-5472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5472"
    },
    {
      "name": "CVE-2017-7760",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7760"
    },
    {
      "name": "CVE-2017-7772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7772"
    },
    {
      "name": "CVE-2017-7777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7777"
    },
    {
      "name": "CVE-2017-7765",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7765"
    },
    {
      "name": "CVE-2017-7778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7778"
    },
    {
      "name": "CVE-2017-7776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7776"
    },
    {
      "name": "CVE-2017-7757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7757"
    },
    {
      "name": "CVE-2017-7758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7758"
    },
    {
      "name": "CVE-2017-7771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7771"
    },
    {
      "name": "CVE-2017-7762",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7762"
    },
    {
      "name": "CVE-2017-7767",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7767"
    },
    {
      "name": "CVE-2017-7775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7775"
    },
    {
      "name": "CVE-2017-7768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7768"
    },
    {
      "name": "CVE-2017-7750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7750"
    },
    {
      "name": "CVE-2017-7761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7761"
    },
    {
      "name": "CVE-2017-7754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7754"
    },
    {
      "name": "CVE-2017-7773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7773"
    },
    {
      "name": "CVE-2017-7749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7749"
    },
    {
      "name": "CVE-2017-7764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7764"
    },
    {
      "name": "CVE-2017-7751",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7751"
    },
    {
      "name": "CVE-2017-5470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5470"
    },
    {
      "name": "CVE-2017-7756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7756"
    },
    {
      "name": "CVE-2017-7766",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7766"
    },
    {
      "name": "CVE-2017-7755",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7755"
    },
    {
      "name": "CVE-2017-5471",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5471"
    },
    {
      "name": "CVE-2017-7774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7774"
    }
  ],
  "links": [],
  "reference": "CERTFR-2017-AVI-174",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2017-06-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMozilla Firefox\u003c/span\u003e. Certaines d\u0027entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Firefox",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2017-16 du 13 juin 2017",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2017-15 du 13 juin 2017",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eMozilla Thunderbird versions ant\u00e9rieures \u00e0 52.2\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2017-7763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7763"
    },
    {
      "name": "CVE-2017-7752",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7752"
    },
    {
      "name": "CVE-2017-5472",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5472"
    },
    {
      "name": "CVE-2017-7772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7772"
    },
    {
      "name": "CVE-2017-7777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7777"
    },
    {
      "name": "CVE-2017-7765",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7765"
    },
    {
      "name": "CVE-2017-7778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7778"
    },
    {
      "name": "CVE-2017-7776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7776"
    },
    {
      "name": "CVE-2017-7757",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7757"
    },
    {
      "name": "CVE-2017-7758",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7758"
    },
    {
      "name": "CVE-2017-7771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7771"
    },
    {
      "name": "CVE-2017-7775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7775"
    },
    {
      "name": "CVE-2017-7750",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7750"
    },
    {
      "name": "CVE-2017-7754",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7754"
    },
    {
      "name": "CVE-2017-7773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7773"
    },
    {
      "name": "CVE-2017-7749",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7749"
    },
    {
      "name": "CVE-2017-7764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7764"
    },
    {
      "name": "CVE-2017-7751",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7751"
    },
    {
      "name": "CVE-2017-5470",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-5470"
    },
    {
      "name": "CVE-2017-7756",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7756"
    },
    {
      "name": "CVE-2017-7774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2017-7774"
    }
  ],
  "links": [],
  "reference": "CERTFR-2017-AVI-182",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2017-06-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eMozilla Thunderbird\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un\ncontournement de la politique de s\u00e9curit\u00e9 et une atteinte \u00e0 la\nconfidentialit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Thunderbird",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2017-17 du 14 juin 2017",
      "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-17/"
    }
  ]
}

{
  "bids": {
    "bid": {
      "bidNumber": "99057"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-7763"
    }
  },
  "description": "Mozilla Firefox for OS X\u662f\u7f8e\u56fdMozilla\u57fa\u91d1\u4f1a\u7684\u4e00\u6b3e\u57fa\u4e8eOS X\u5e73\u53f0\u7684\u5f00\u6e90Web\u6d4f\u89c8\u5668\u3002Firefox ESR for OS X\u662fFirefox\u7684\u4e00\u4e2a\u57fa\u4e8eOS X\u5e73\u53f0\u7684\u5ef6\u957f\u652f\u6301\u7248\u672c\u3002\r\n\r\n\u57fa\u4e8eOS X\u5e73\u53f0\u7684Mozilla Firefox 54\u4e4b\u524d\u7684\u7248\u672c\u548cFirefox ESR 52.2\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u5b58\u5728\u6b3a\u9a97\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5b9e\u65bd\u57df\u540d\u6b3a\u9a97\u653b\u51fb\u3002",
  "discovererName": "Nils, Tobias Klein, Yuji Tounai of NTT Communications, Abhishek Arya, F. Alonso (revskills), Holger Fuhrmannek, Tyson Smith, Nicolas Trippar of Zimperium zLabs, Michal Bentkowski, Samuel Erb, Jonathan Birch and Microsoft Vulnerability Research, and Seb Pat",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2017-15/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-12550",
  "openTime": "2017-07-03",
  "patchDescription": "Mozilla Firefox for OS X\u662f\u7f8e\u56fdMozilla\u57fa\u91d1\u4f1a\u7684\u4e00\u6b3e\u57fa\u4e8eOS X\u5e73\u53f0\u7684\u5f00\u6e90Web\u6d4f\u89c8\u5668\u3002Firefox ESR for OS X\u662fFirefox\u7684\u4e00\u4e2a\u57fa\u4e8eOS X\u5e73\u53f0\u7684\u5ef6\u957f\u652f\u6301\u7248\u672c\u3002\r\n\r\n\u57fa\u4e8eOS X\u5e73\u53f0\u7684Mozilla Firefox 54\u4e4b\u524d\u7684\u7248\u672c\u548cFirefox ESR 52.2\u4e4b\u524d\u7684\u7248\u672c\u4e2d\u5b58\u5728\u6b3a\u9a97\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5b9e\u65bd\u57df\u540d\u6b3a\u9a97\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Mozilla Firefox\u548cFirefox ESR for OS X\u6b3a\u9a97\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Mozilla Firefox \u003c54",
      "mozilla Firefox ESR \u003c52.2"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/99057",
  "serverity": "\u4e2d",
  "submitTime": "2017-06-23",
  "title": "Mozilla Firefox\u548cFirefox ESR for OS X\u6b3a\u9a97\u6f0f\u6d1e"
}

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "54",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "security@mozilla.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F5DBE64-6529-4705-869D-4FD030CFADE0",
              "versionEndExcluding": "52.2.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "12FE3109-0EE6-49DC-974A-E522F55B17E1",
              "versionEndExcluding": "54.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "37E2AFA4-8E1E-4074-BA83-B32D702B439C",
              "versionEndExcluding": "52.2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4781BF1E-8A4E-4AFF-9540-23D523EE30DD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEECE5FC-CACF-4496-A3E7-164736409252",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2."
    },
    {
      "lang": "es",
      "value": "Las fuentes por defecto en OS X muestran algunos caracteres tibetanos como espacios en blanco. Cuando se emplean en la barra de direcciones como parte de un IDN, se pueden utilizar en ataques de suplantaci\u00f3n de nombres de dominio. Nota: este ataque solo afecta a sistemas operativos OS X. Otros sistemas operativos no se han visto afectados. La vulnerabilidad afecta a Firefox en versiones anteriores a la 54, Firefox ESR en versiones anteriores a la 52.2 y Thunderbird en versiones anteriores a la 52.2."
    }
  ],
  "id": "CVE-2017-7763",
  "lastModified": "2026-06-17T01:25:08.903",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2018-06-11T21:29:08.390",
  "references": [
    {
      "source": "security@mozilla.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/99057"
    },
    {
      "source": "security@mozilla.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1038689"
    },
    {
      "source": "security@mozilla.org",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1360309"
    },
    {
      "source": "security@mozilla.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.mozilla.org/security/advisories/mfsa2017-15/"
    },
    {
      "source": "security@mozilla.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.mozilla.org/security/advisories/mfsa2017-16/"
    },
    {
      "source": "security@mozilla.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.mozilla.org/security/advisories/mfsa2017-17/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/99057"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1038689"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Vendor Advisory"
      ],
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1360309"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.mozilla.org/security/advisories/mfsa2017-15/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.mozilla.org/security/advisories/mfsa2017-16/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.mozilla.org/security/advisories/mfsa2017-17/"
    }
  ],
  "sourceIdentifier": "security@mozilla.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2017-7763"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2018-06-11T21:29:00Z",
    "severity": "MODERATE"
  },
  "details": "Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
  "id": "GHSA-2m94-7q7f-58gc",
  "modified": "2025-11-25T18:32:08Z",
  "published": "2022-05-14T03:07:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-7763"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1360309"
    },
    {
      "type": "WEB",
      "url": "https://www.mozilla.org/security/advisories/mfsa2017-15"
    },
    {
      "type": "WEB",
      "url": "https://www.mozilla.org/security/advisories/mfsa2017-16"
    },
    {
      "type": "WEB",
      "url": "https://www.mozilla.org/security/advisories/mfsa2017-17"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/99057"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1038689"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2017-7763",
    "description": "Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
    "id": "GSD-2017-7763",
    "references": [
      "https://www.suse.com/security/cve/CVE-2017-7763.html",
      "https://advisories.mageia.org/CVE-2017-7763.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2017-7763"
      ],
      "details": "Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
      "id": "GSD-2017-7763",
      "modified": "2023-12-13T01:21:06.363824Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@mozilla.org",
        "ID": "CVE-2017-7763",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Firefox",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "54"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Firefox ESR",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "52.2"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Thunderbird",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "52.2"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Mozilla"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Mac fonts render some unicode characters as spaces"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "99057",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/99057"
          },
          {
            "name": "https://www.mozilla.org/security/advisories/mfsa2017-15/",
            "refsource": "CONFIRM",
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-15/"
          },
          {
            "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1360309",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1360309"
          },
          {
            "name": "1038689",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1038689"
          },
          {
            "name": "https://www.mozilla.org/security/advisories/mfsa2017-17/",
            "refsource": "CONFIRM",
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-17/"
          },
          {
            "name": "https://www.mozilla.org/security/advisories/mfsa2017-16/",
            "refsource": "CONFIRM",
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-16/"
          }
        ]
      }
    },
    "mozilla.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@mozilla.org",
        "ID": "CVE-2017-7763"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Thunderbird",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "52.2"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Firefox",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "54"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Firefox ESR",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "\u003c",
                          "version_value": "52.2"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Mozilla"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. \u003cbr\u003e*Note: This attack only affects OS X operating systems. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 52.2, Firefox \u003c 54, and Firefox ESR \u003c 52.2."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "Mac fonts render some unicode characters as spaces"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-15/"
          },
          {
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-17/"
          },
          {
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-16/"
          },
          {
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1360309"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "54.0",
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "52.2.0",
                    "vulnerable": true
                  },
                  {
                    "cpe23Uri": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "52.2.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-7763"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-17/",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-17/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-16/",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-16/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-15/",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-15/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1360309",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Vendor Advisory"
              ],
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1360309"
            },
            {
              "name": "1038689",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1038689"
            },
            {
              "name": "99057",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/99057"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 1.4
        }
      },
      "lastModifiedDate": "2018-08-14T12:40Z",
      "publishedDate": "2018-06-11T21:29Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for Mozilla Thunderbird",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update to Thunderbird 52.2 fixes security issues and bugs.\n\nThe following vulnerabilities were fixed:\n    \n* CVE-2017-5472: Use-after-free using destroyed node when regenerating trees\n* CVE-2017-7749: Use-after-free during docshell reloading\n* CVE-2017-7750: Use-after-free with track elements\n* CVE-2017-7751: Use-after-free with content viewer listeners\n* CVE-2017-7752: Use-after-free with IME input\n* CVE-2017-7754: Out-of-bounds read in WebGL with ImageInfo object\n* CVE-2017-7756: Use-after-free and use-after-scope logging XHR header errors\n* CVE-2017-7757: Use-after-free in IndexedDB\n* CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,\n  CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,\n  CVE-2017-7777: Vulnerabilities in the Graphite 2 library\n* CVE-2017-7758: Out-of-bounds read in Opus encoder\n* CVE-2017-7764: Domain spoofing with combination of Canadian Syllabics and other unicode blocks\n* CVE-2017-5470: Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2\n\nMozilla Thunderbird now requires NSS 3.28.5.\n\nThe following bugs were fixed:\n\n* Embedded images not shown in email received from Hotmail/Outlook webmailer\n* Detection of non-ASCII font names in font selector\n* Attachment not forwarded correctly under certain circumstances\n* Multiple requests for master password when GMail OAuth2 is enabled\n* Large number of blank pages being printed under certain circumstances when invalid preferences were present\n* Messages sent via the Simple MAPI interface are forced to HTML\n* Calendar: Invitations can\u0027t be printed\n* Mailing list (group) not accessible from macOS or Outlook address book\n* Clicking on links with references/anchors where target doesn\u0027t exist in the message not opening in external browser\n  ",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-2017-694",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2017_1579-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1040105",
        "url": "https://bugzilla.suse.com/1040105"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1042090",
        "url": "https://bugzilla.suse.com/1042090"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1043960",
        "url": "https://bugzilla.suse.com/1043960"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1273265",
        "url": "https://bugzilla.suse.com/1273265"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1355039",
        "url": "https://bugzilla.suse.com/1355039"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1356558",
        "url": "https://bugzilla.suse.com/1356558"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1356824",
        "url": "https://bugzilla.suse.com/1356824"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1357090",
        "url": "https://bugzilla.suse.com/1357090"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1359547",
        "url": "https://bugzilla.suse.com/1359547"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1360309",
        "url": "https://bugzilla.suse.com/1360309"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1363396",
        "url": "https://bugzilla.suse.com/1363396"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1364283",
        "url": "https://bugzilla.suse.com/1364283"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1365602",
        "url": "https://bugzilla.suse.com/1365602"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1366595",
        "url": "https://bugzilla.suse.com/1366595"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1368490",
        "url": "https://bugzilla.suse.com/1368490"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5470 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5470/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-5472 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-5472/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7749 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7749/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7750 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7750/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7751 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7751/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7752 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7752/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7754 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7754/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7756 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7756/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7757 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7757/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7758 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7758/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7763 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7763/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7764 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7764/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7765 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7765/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7771 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7771/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7772 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7772/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7773 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7773/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7774 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7774/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7775 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7775/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7776 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7776/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7777 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7777/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-7778 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-7778/"
      }
    ],
    "title": "Security update for Mozilla Thunderbird",
    "tracking": {
      "current_release_date": "2017-06-16T09:03:31Z",
      "generator": {
        "date": "2017-06-16T09:03:31Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2017:1579-1",
      "initial_release_date": "2017-06-16T09:03:31Z",
      "revision_history": [
        {
          "date": "2017-06-16T09:03:31Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-52.2-36.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-52.2-36.1.x86_64",
                  "product_id": "MozillaThunderbird-52.2-36.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
                  "product_id": "MozillaThunderbird-buildsymbols-52.2-36.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-devel-52.2-36.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-devel-52.2-36.1.x86_64",
                  "product_id": "MozillaThunderbird-devel-52.2-36.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-52.2-36.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-52.2-36.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-common-52.2-36.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-52.2-36.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-52.2-36.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-other-52.2-36.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Package Hub 12",
                "product": {
                  "name": "SUSE Package Hub 12",
                  "product_id": "SUSE Package Hub 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-52.2-36.1.x86_64 as component of SUSE Package Hub 12",
          "product_id": "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-52.2-36.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-buildsymbols-52.2-36.1.x86_64 as component of SUSE Package Hub 12",
          "product_id": "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-devel-52.2-36.1.x86_64 as component of SUSE Package Hub 12",
          "product_id": "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-devel-52.2-36.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-52.2-36.1.x86_64 as component of SUSE Package Hub 12",
          "product_id": "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-52.2-36.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-52.2-36.1.x86_64 as component of SUSE Package Hub 12",
          "product_id": "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-52.2-36.1.x86_64",
        "relates_to_product_reference": "SUSE Package Hub 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2017-5470",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5470"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5470",
          "url": "https://www.suse.com/security/cve/CVE-2017-5470"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-5470",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-5470",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-5470",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-5470",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-5470",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-5470"
    },
    {
      "cve": "CVE-2017-5472",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-5472"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-5472",
          "url": "https://www.suse.com/security/cve/CVE-2017-5472"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-5472",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-5472",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-5472",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-5472",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-5472",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-5472"
    },
    {
      "cve": "CVE-2017-7749",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7749"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7749",
          "url": "https://www.suse.com/security/cve/CVE-2017-7749"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7749",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7749",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7749",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7749",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7749",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7749"
    },
    {
      "cve": "CVE-2017-7750",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7750"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability during video control operations when a \"\u003ctrack\u003e\" element holds a reference to an older window if that window has been replaced in the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7750",
          "url": "https://www.suse.com/security/cve/CVE-2017-7750"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7750",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7750",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7750",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7750",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7750",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7750"
    },
    {
      "cve": "CVE-2017-7751",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7751"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7751",
          "url": "https://www.suse.com/security/cve/CVE-2017-7751"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7751",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7751",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7751",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7751",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7751",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7751"
    },
    {
      "cve": "CVE-2017-7752",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7752"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are handled. This results in a potentially exploitable crash but would require specific user interaction to trigger. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7752",
          "url": "https://www.suse.com/security/cve/CVE-2017-7752"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7752",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7752",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7752",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7752",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7752",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7752"
    },
    {
      "cve": "CVE-2017-7754",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7754"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds read in WebGL with a maliciously crafted \"ImageInfo\" object during WebGL operations. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7754",
          "url": "https://www.suse.com/security/cve/CVE-2017-7754"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7754",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7754",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7754",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7754",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7754",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7754"
    },
    {
      "cve": "CVE-2017-7756",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7756"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This could result in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7756",
          "url": "https://www.suse.com/security/cve/CVE-2017-7756"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7756",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7756",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7756",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7756",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7756",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7756"
    },
    {
      "cve": "CVE-2017-7757",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7757"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7757",
          "url": "https://www.suse.com/security/cve/CVE-2017-7757"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7757",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7757",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7757",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7757",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7757",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7757"
    },
    {
      "cve": "CVE-2017-7758",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7758"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7758",
          "url": "https://www.suse.com/security/cve/CVE-2017-7758"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7758",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7758",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7758",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7758",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7758",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7758"
    },
    {
      "cve": "CVE-2017-7763",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7763"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7763",
          "url": "https://www.suse.com/security/cve/CVE-2017-7763"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7763",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7763",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7763",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7763",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7763",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7763"
    },
    {
      "cve": "CVE-2017-7764",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7764"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Characters from the \"Canadian Syllabics\" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw \"punycode\" form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from \"Aspirational Use Scripts\" such as Canadian Syllabics to be mixed with Latin characters in the \"moderately restrictive\" IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as \"Limited Use Scripts.\". This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7764",
          "url": "https://www.suse.com/security/cve/CVE-2017-7764"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7764",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7764",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7764",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7764",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7764",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7764"
    },
    {
      "cve": "CVE-2017-7765",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7765"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The \"Mark of the Web\" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7765",
          "url": "https://www.suse.com/security/cve/CVE-2017-7765"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7765",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7765",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7765",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7765",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7765",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7765"
    },
    {
      "cve": "CVE-2017-7771",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7771"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7771",
          "url": "https://www.suse.com/security/cve/CVE-2017-7771"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7771",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7771",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7771",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7771",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7771",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7771"
    },
    {
      "cve": "CVE-2017-7772",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7772"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7772",
          "url": "https://www.suse.com/security/cve/CVE-2017-7772"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7772",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7772",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7772",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7772",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7772",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7772"
    },
    {
      "cve": "CVE-2017-7773",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7773"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7773",
          "url": "https://www.suse.com/security/cve/CVE-2017-7773"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7773",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7773",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7773",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7773",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7773",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7773"
    },
    {
      "cve": "CVE-2017-7774",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7774"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7774",
          "url": "https://www.suse.com/security/cve/CVE-2017-7774"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7774",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7774",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7774",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7774",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7774",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7774"
    },
    {
      "cve": "CVE-2017-7775",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7775"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7775",
          "url": "https://www.suse.com/security/cve/CVE-2017-7775"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7775",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7775",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7775",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7775",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7775",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7775"
    },
    {
      "cve": "CVE-2017-7776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7776",
          "url": "https://www.suse.com/security/cve/CVE-2017-7776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7776",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7776",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7776",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7776",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7776",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7776"
    },
    {
      "cve": "CVE-2017-7777",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7777"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7777",
          "url": "https://www.suse.com/security/cve/CVE-2017-7777"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7777",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7777",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7777",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7777",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7777",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7777"
    },
    {
      "cve": "CVE-2017-7778",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-7778"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox \u003c 54, Firefox ESR \u003c 52.2, and Thunderbird \u003c 52.2.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
          "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-7778",
          "url": "https://www.suse.com/security/cve/CVE-2017-7778"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1043960 for CVE-2017-7778",
          "url": "https://bugzilla.suse.com/1043960"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044239 for CVE-2017-7778",
          "url": "https://bugzilla.suse.com/1044239"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044240 for CVE-2017-7778",
          "url": "https://bugzilla.suse.com/1044240"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044241 for CVE-2017-7778",
          "url": "https://bugzilla.suse.com/1044241"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1044242 for CVE-2017-7778",
          "url": "https://bugzilla.suse.com/1044242"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Package Hub 12:MozillaThunderbird-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-buildsymbols-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-devel-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-common-52.2-36.1.x86_64",
            "SUSE Package Hub 12:MozillaThunderbird-translations-other-52.2-36.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-06-16T09:03:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2017-7778"
    }
  ]
}