Not rated
CVE-2018-12359 A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element…
Description
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Thunderbird 60 | earliest → < 60 | 60 |
| Thunderbird 52.9 | earliest → < 52.9 | 52.9 |
| Firefox ESR 60.1 | earliest → < 60.1 | 60.1 |
| Firefox ESR 52.9 | earliest → < 52.9 | 52.9 |
| Firefox 61 | earliest → < 61 | 61 |
References
- bugzilla.mozilla.org bugzilla.mozilla.org
- GLSA-201810-01 security.gentoo.org
- 104555 www.securityfocus.com
- www.mozilla.org www.mozilla.org
- RHSA-2018:2112 access.redhat.com
- GLSA-201811-13 security.gentoo.org
- DSA-4235 www.debian.org
- www.mozilla.org www.mozilla.org
- RHSA-2018:2113 access.redhat.com
- www.mozilla.org www.mozilla.org
- DSA-4244 www.debian.org
- 1041193 www.securitytracker.com
- www.mozilla.org www.mozilla.org
- RHSA-2018:2252 access.redhat.com
- www.mozilla.org www.mozilla.org
- [debian-lts-announce] 20180714 [SECURITY] [DLA 1425-1] thunderbird security update lists.debian.org
- RHSA-2018:2251 access.redhat.com
- USN-3705-1 usn.ubuntu.com
- USN-3714-1 usn.ubuntu.com
- [debian-lts-announce] 20180629 [SECURITY] [DLA 1406-1] firefox-esr security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of Thunderbird
The 1713 CVEs of Thunderbird →
CVE-2026-118180
Matrix homeserver could redirect the chat session to a local file or network share
7.5
High
CVE-2026-118179
Request forgery via news: links
8.8
High
CVE-2026-118178
RSS feed could redirect its subscription to a local file or network share
5.7
Medium
CVE-2026-118177
Calendar discovery accepted local file and remote network share locations
9.1
Critical