1. Home
  2. Security Advisories
  3. Mozilla
  4. MFSA-2018-09

[MFSA-2018-09] Security vulnerabilities fixed in Thunderbird 52.7

Severity Critical
Affected Packages 1
Fixed Packages 1
CVEs 6
Info Packages References Vulnerabilities

In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts.

  • CVE-2018-5125: Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 (critical)
    Mozilla developers and community members Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, and Philipp reported memory safety bugs present in Firefox 58, Firefox ESR 52.6, and Thunderbird 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.

  • CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList (high)
    A buffer overflow can occur when manipulating the SVG <code>animatedPathSegList</code> through script. This results in a potentially exploitable crash.

  • CVE-2018-5129: Out-of-bounds write with malformed IPC messages (high)
    A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process.

  • CVE-2018-5144: Integer overflow during Unicode conversion (moderate)
    An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter.

  • CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird 52.7 (critical)
    Mozilla developers Jet Villegas and Randell Jesup reported memory safety bugs present in Firefox ESR 52.6 and Thunderbird 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.

  • CVE-2018-5146: Out of bounds memory write in libvorbis (critical)
    An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest.

Package Affected Version
pkg:mozilla/Thunderbird < 52.7
Package Fixed Version
pkg:mozilla/Thunderbird = 52.7
ID
MFSA-2018-09
Severity
critical
URL
https://www.mozilla.org/en-US/security/advisories/mfsa2018-09
Published
2018-03-23T00:00:00
(6 years ago)
Modified
2018-03-23T00:00:00
(6 years ago)
Other Advisories
Source # ID Name URL
Bugzilla 1416529 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1416529
Bugzilla 1434580 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1434580
Bugzilla 1434384 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1434384
Bugzilla 1437450 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1437450
Bugzilla 1437507 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1437507
Bugzilla 1426988 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1426988
Bugzilla 1438425 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1438425
Bugzilla 1324042 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1324042
Bugzilla 1437087 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1437087
Bugzilla 1443865 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1443865
Bugzilla 1425520 Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1425520
Bugzilla 1430557 https://bugzilla.mozilla.org/show_bug.cgi?id=1430557
Bugzilla 1428947 https://bugzilla.mozilla.org/show_bug.cgi?id=1428947
Bugzilla 1440926 https://bugzilla.mozilla.org/show_bug.cgi?id=1440926
Bugzilla 1261175 Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1261175
Bugzilla 1348955 Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird 52.7 https://bugzilla.mozilla.org/show_bug.cgi?id=1348955
Bugzilla 1446062 https://bugzilla.mozilla.org/show_bug.cgi?id=1446062
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:mozilla/Thunderbird Thunderbird < 52.7
Fixed pkg:mozilla/Thunderbird Thunderbird = 52.7
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date