Non notée
CVE-2018-5161 Crafted message headers can cause a Thunderbird process to hang on receiving the message
Description
Crafted message headers can cause a Thunderbird process to hang on receiving the message. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Thunderbird ESR 52.8 | premières → < 52.8 | 52.8 |
| Thunderbird 52.8 | premières → < 52.8 | 52.8 |
Références
- RHSA-2018:1726 access.redhat.com
- GLSA-201811-13 security.gentoo.org
- www.mozilla.org www.mozilla.org
- USN-3660-1 usn.ubuntu.com
- 1040946 www.securitytracker.com
- [debian-lts-announce] 20180525 [SECURITY] [DLA 1382-1] thunderbird security update lists.debian.org
- RHSA-2018:1725 access.redhat.com
- DSA-4209 www.debian.org
- bugzilla.mozilla.org bugzilla.mozilla.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Thunderbird ESR
Les 13 CVE de Thunderbird ESR →
CVE-2018-5184
Using remote content in encrypted messages can lead to the disclosure of plaintext
Non notée
CVE-2018-5183
Mozilla developers backported selected changes in the Skia library
Non notée
CVE-2018-5159
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,…
Non notée
CVE-2018-5170
It is possible to spoof the filename of an attachment and display an arbitrary attachment name
Non notée