Vulnerabilities > Mozilla > Thunderbird > 50.0

DATE CVE VULNERABILITY TITLE RISK
2018-06-11 CVE-2017-5416 NULL Pointer Dereference vulnerability in Mozilla Thunderbird
In certain circumstances a networking event listener can be prematurely released.
network
low complexity
mozilla CWE-476
7.5
2018-06-11 CVE-2017-5414 Information Exposure vulnerability in Mozilla Firefox
The file picker dialog can choose and display the wrong local default directory when instantiated.
local
low complexity
mozilla CWE-200
5.5
2018-06-11 CVE-2017-5413 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Mozilla Firefox
A segmentation fault can occur during some bidirectional layout operations.
network
low complexity
mozilla CWE-119
critical
9.8
2018-06-11 CVE-2017-5412 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Mozilla Firefox
A buffer overflow read during SVG filter color value operations, resulting in data exposure.
network
low complexity
mozilla CWE-119
7.5
2018-06-11 CVE-2017-5411 Use After Free vulnerability in Mozilla Firefox
A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content.
network
low complexity
mozilla CWE-416
7.5
2018-06-11 CVE-2017-5407 Information Exposure vulnerability in multiple products
Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a targeted user.
network
low complexity
debian redhat mozilla CWE-200
6.5
2018-06-11 CVE-2017-5406 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Mozilla Thunderbird
A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empty masks.
network
low complexity
mozilla CWE-119
7.5
2018-06-11 CVE-2017-5403 Use After Free vulnerability in Mozilla Thunderbird
When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object.
network
low complexity
mozilla CWE-416
critical
9.8
2018-06-11 CVE-2017-5399 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Mozilla Firefox
Memory safety bugs were reported in Firefox 51.
network
low complexity
mozilla CWE-119
critical
9.8
2018-06-11 CVE-2017-5398 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Memory safety bugs were reported in Thunderbird 45.7.
network
low complexity
debian redhat mozilla CWE-119
critical
9.8