Skip to content

Vulnerabilities of Mozilla Thunderbird

Is your version affected?

CVE Summary Score Published
CVE-2017-5451 A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event Not rated Jun 11, 2018
CVE-2017-5422 If a malicious site uses the "view-source:" protocol in a series within a single hyperlink, it can trigger a… Not rated Jun 11, 2018
CVE-2017-5442 A use-after-free vulnerability during changes in style when manipulating DOM elements Not rated Jun 11, 2018
CVE-2017-5433 A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are… Not rated Jun 11, 2018
CVE-2017-5410 Memory corruption resulting in a potentially exploitable crash during garbage collection of JavaScript due errors in how… Not rated Jun 11, 2018
CVE-2017-5402 A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been… Not rated Jun 11, 2018
CVE-2017-5460 A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses… Not rated Jun 11, 2018
CVE-2017-5421 A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user… Not rated Jun 11, 2018
CVE-2017-5467 A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping… Not rated Jun 11, 2018
CVE-2017-5449 A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with… Not rated Jun 11, 2018
CVE-2017-5441 A use-after-free vulnerability when holding a selection during scroll events Not rated Jun 11, 2018
CVE-2017-5432 A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash Not rated Jun 11, 2018
CVE-2017-5459 A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash Not rated Jun 11, 2018
CVE-2017-5401 A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error Not rated Jun 11, 2018
CVE-2017-5440 A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching… Not rated Jun 11, 2018
CVE-2017-5419 If a malicious site repeatedly triggers a modal authentication prompt, eventually the browser UI will become… Not rated Jun 11, 2018
CVE-2017-5430 Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52 Not rated Jun 11, 2018
CVE-2017-5380 A potential use-after-free found through fuzzing during DOM manipulation of SVG content Not rated Jun 11, 2018
CVE-2017-5408 Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such… Not rated Jun 11, 2018
CVE-2017-5400 JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to… Not rated Jun 11, 2018
CVE-2017-5447 An out-of-bounds read during the processing of glyph widths during text layout Not rated Jun 11, 2018
CVE-2017-5418 An out of bounds read error occurs when parsing some HTTP digest authorization responses, resulting in information… Not rated Jun 11, 2018
CVE-2017-5429 Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52 Not rated Jun 11, 2018
CVE-2017-5439 A use-after-free vulnerability during XSLT processing due to poor handling of template parameters Not rated Jun 11, 2018
CVE-2017-5399 Memory safety bugs were reported in Firefox 51 Not rated Jun 11, 2018

Other Mozilla products