Non notée
CVE-2018-5178 A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of…
Description
A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Thunderbird ESR 52.8 | premières → < 52.8 | 52.8 |
| Thunderbird 52.8 | premières → < 52.8 | 52.8 |
| Firefox ESR 52.8 | premières → < 52.8 | 52.8 |
Références
- RHSA-2018:1415 access.redhat.com
- GLSA-201810-01 security.gentoo.org
- RHSA-2018:1726 access.redhat.com
- RHSA-2018:1414 access.redhat.com
- GLSA-201811-13 security.gentoo.org
- www.mozilla.org www.mozilla.org
- USN-3660-1 usn.ubuntu.com
- 1040898 www.securitytracker.com
- DSA-4199 www.debian.org
- [debian-lts-announce] 20180525 [SECURITY] [DLA 1382-1] thunderbird security update lists.debian.org
- [debian-lts-announce] 20180511 [SECURITY] [DLA 1376-1] firefox-esr security update lists.debian.org
- RHSA-2018:1725 access.redhat.com
- 104138 www.securityfocus.com
- DSA-4209 www.debian.org
- www.mozilla.org www.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Thunderbird ESR
Les 13 CVE de Thunderbird ESR →
CVE-2018-5174
In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated…
Non notée
CVE-2018-5159
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,…
Non notée
CVE-2018-5184
Using remote content in encrypted messages can lead to the disclosure of plaintext
Non notée
CVE-2018-5183
Mozilla developers backported selected changes in the Skia library
Non notée