Non notée
CVE-2018-5183 Mozilla developers backported selected changes in the Skia library
Description
Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Thunderbird ESR 52.8 | premières → < 52.8 | 52.8 |
| Thunderbird 52.8 | premières → < 52.8 | 52.8 |
| Firefox ESR 52.8 | premières → < 52.8 | 52.8 |
Références
- RHSA-2018:1415 access.redhat.com
- GLSA-201810-01 security.gentoo.org
- RHSA-2018:1726 access.redhat.com
- RHSA-2018:1414 access.redhat.com
- bugzilla.mozilla.org bugzilla.mozilla.org
- GLSA-201811-13 security.gentoo.org
- www.mozilla.org www.mozilla.org
- USN-3660-1 usn.ubuntu.com
- 1040898 www.securitytracker.com
- DSA-4199 www.debian.org
- [debian-lts-announce] 20180525 [SECURITY] [DLA 1382-1] thunderbird security update lists.debian.org
- [debian-lts-announce] 20180511 [SECURITY] [DLA 1376-1] firefox-esr security update lists.debian.org
- RHSA-2018:1725 access.redhat.com
- 104138 www.securityfocus.com
- DSA-4209 www.debian.org
- www.mozilla.org www.mozilla.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Thunderbird ESR
Les 13 CVE de Thunderbird ESR →
CVE-2018-5174
In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated…
Non notée
CVE-2018-5159
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks,…
Non notée
CVE-2018-5184
Using remote content in encrypted messages can lead to the disclosure of plaintext
Non notée
CVE-2018-5170
It is possible to spoof the filename of an attachment and display an arbitrary attachment name
Non notée