rpm package
suse/MozillaThunderbird&distro=SUSE Linux Enterprise Workstation Extension 15
pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015
Vulnerabilities (127)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-12363 | — | < 52.9.1-3.7.1 | 52.9.1-3.7.1 | Oct 18, 2018 | A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vu | ||
| CVE-2018-12362 | — | < 52.9.1-3.7.1 | 52.9.1-3.7.1 | Oct 18, 2018 | An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and | ||
| CVE-2018-12361 | — | < 60.2.1-3.13.1 | 60.2.1-3.13.1 | Oct 18, 2018 | An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 6 | ||
| CVE-2018-12360 | — | < 52.9.1-3.7.1 | 52.9.1-3.7.1 | Oct 18, 2018 | A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefo | ||
| CVE-2018-12359 | — | < 52.9.1-3.7.1 | 52.9.1-3.7.1 | Oct 18, 2018 | A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects T | ||
| CVE-2017-16541 | Med | 6.5 | < 60.2.1-3.13.1 | 60.2.1-3.13.1 | Nov 4, 2017 | Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected. | |
| CVE-2016-5824 | Med | 5.5 | < 60.5.0-3.20.2 | 60.5.0-3.20.2 | Jan 27, 2017 | libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file. |
- CVE-2018-12363Oct 18, 2018affected < 52.9.1-3.7.1fixed 52.9.1-3.7.1
A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document that held the node being freed but the node still having a pointer referencing it. This results in a potentially exploitable crash. This vu
- CVE-2018-12362Oct 18, 2018affected < 52.9.1-3.7.1fixed 52.9.1-3.7.1
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and
- CVE-2018-12361Oct 18, 2018affected < 60.2.1-3.13.1fixed 60.2.1-3.13.1
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 6
- CVE-2018-12360Oct 18, 2018affected < 52.9.1-3.7.1fixed 52.9.1-3.7.1
A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefo
- CVE-2018-12359Oct 18, 2018affected < 52.9.1-3.7.1fixed 52.9.1-3.7.1
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects T
- affected < 60.2.1-3.13.1fixed 60.2.1-3.13.1
Tor Browser before 7.0.9 on macOS and Linux allows remote attackers to bypass the intended anonymity feature and discover a client IP address via vectors involving a crafted web site that leverages file:// mishandling in Firefox, aka TorMoil. NOTE: Tails is unaffected.
- affected < 60.5.0-3.20.2fixed 60.5.0-3.20.2
libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
Page 7 of 7