Not rated
CVE-2018-5178 A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of…
Description
A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Thunderbird ESR 52.8 | earliest → < 52.8 | 52.8 |
| Thunderbird 52.8 | earliest → < 52.8 | 52.8 |
| Firefox ESR 52.8 | earliest → < 52.8 | 52.8 |
References
- RHSA-2018:1415 access.redhat.com
- GLSA-201810-01 security.gentoo.org
- RHSA-2018:1726 access.redhat.com
- RHSA-2018:1414 access.redhat.com
- GLSA-201811-13 security.gentoo.org
- www.mozilla.org www.mozilla.org
- USN-3660-1 usn.ubuntu.com
- 1040898 www.securitytracker.com
- DSA-4199 www.debian.org
- [debian-lts-announce] 20180525 [SECURITY] [DLA 1382-1] thunderbird security update lists.debian.org
- [debian-lts-announce] 20180511 [SECURITY] [DLA 1376-1] firefox-esr security update lists.debian.org
- RHSA-2018:1725 access.redhat.com
- 104138 www.securityfocus.com
- DSA-4209 www.debian.org
- www.mozilla.org www.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
Timeline
- Published
- Last modified
Other CVEs of Thunderbird ESR
The 13 CVEs of Thunderbird ESR →
CVE-2018-5174
In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated…
Not rated
CVE-2018-5159
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,…
Not rated
CVE-2018-5184
Using remote content in encrypted messages can lead to the disclosure of plaintext
Not rated
CVE-2018-5183
Mozilla developers backported selected changes in the Skia library
Not rated