Skip to content

Vulnerabilities of Mozilla Thunderbird ESR

Is your version affected?

CVE Summary Score Published
CVE-2018-5162 Plaintext of decrypted emails can leak through the src attribute of remote images, or links Not rated Jun 11, 2018
CVE-2018-5161 Crafted message headers can cause a Thunderbird process to hang on receiving the message Not rated Jun 11, 2018
CVE-2018-5174 In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated… Not rated Jun 11, 2018
CVE-2018-5184 Using remote content in encrypted messages can lead to the disclosure of plaintext Not rated Jun 11, 2018
CVE-2018-5159 An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,… Not rated Jun 11, 2018
CVE-2018-5183 Mozilla developers backported selected changes in the Skia library Not rated Jun 11, 2018
CVE-2018-5170 It is possible to spoof the filename of an attachment and display an arbitrary attachment name Not rated Jun 11, 2018
CVE-2018-5150 Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 Not rated Jun 11, 2018
CVE-2018-5168 Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property… Not rated Jun 11, 2018
CVE-2018-5178 A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of… Not rated Jun 11, 2018
CVE-2018-5185 Plaintext of decrypted emails can leak through by user submitting an embedded form Not rated Jun 11, 2018
CVE-2018-5155 A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths Not rated Jun 11, 2018
CVE-2018-5154 A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths Not rated Jun 11, 2018

Other Mozilla products