Not rated
CVE-2018-5161 Crafted message headers can cause a Thunderbird process to hang on receiving the message
Description
Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Thunderbird ESR 52.8 | earliest → < 52.8 | 52.8 |
| Thunderbird 52.8 | earliest → < 52.8 | 52.8 |
References
- RHSA-2018:1726 access.redhat.com
- GLSA-201811-13 security.gentoo.org
- www.mozilla.org www.mozilla.org
- USN-3660-1 usn.ubuntu.com
- 1040946 www.securitytracker.com
- [debian-lts-announce] 20180525 [SECURITY] [DLA 1382-1] thunderbird security update lists.debian.org
- RHSA-2018:1725 access.redhat.com
- DSA-4209 www.debian.org
- bugzilla.mozilla.org bugzilla.mozilla.org
Timeline
- Published
- Last modified
Other CVEs of Thunderbird ESR
The 13 CVEs of Thunderbird ESR →
CVE-2018-5184
Using remote content in encrypted messages can lead to the disclosure of plaintext
Not rated
CVE-2018-5183
Mozilla developers backported selected changes in the Skia library
Not rated
CVE-2018-5159
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,…
Not rated
CVE-2018-5170
It is possible to spoof the filename of an attachment and display an arbitrary attachment name
Not rated