Non notée
CVE-2018-5162 Plaintext of decrypted emails can leak through the src attribute of remote images, or links
Description
Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Thunderbird ESR 52.8 | premières → < 52.8 | 52.8 |
| Thunderbird 52.8 | premières → < 52.8 | 52.8 |
Références
- RHSA-2018:1726 access.redhat.com
- GLSA-201811-13 security.gentoo.org
- www.mozilla.org www.mozilla.org
- USN-3660-1 usn.ubuntu.com
- 1040946 www.securitytracker.com
- bugzilla.mozilla.org bugzilla.mozilla.org
- [debian-lts-announce] 20180525 [SECURITY] [DLA 1382-1] thunderbird security update lists.debian.org
- RHSA-2018:1725 access.redhat.com
- DSA-4209 www.debian.org
- 104240 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Thunderbird ESR
Les 13 CVE de Thunderbird ESR →
CVE-2018-5184
Using remote content in encrypted messages can lead to the disclosure of plaintext
Non notée
CVE-2018-5183
Mozilla developers backported selected changes in the Skia library
Non notée
CVE-2018-5159
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,…
Non notée
CVE-2018-5170
It is possible to spoof the filename of an attachment and display an arbitrary attachment name
Non notée