USN-3416-1
Dashboard / Vulnerabilities / USN-3416-1
USN-3416-1
Summary: thunderbird vulnerabilities
Details: Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to bypass same-origin restrictions, bypass CSP restrictions, obtain sensitive information, spoof the origin of modal alerts, cause a denial of service via application crash, or execute arbitrary code. (CVE-2017-7753, CVE-2017-7779, CVE-2017-7784, CVE-2017-7785, CVE-2017-7787, CVE-2017-7791, CVE-2017-7792, CVE-2017-7800, CVE-2017-7801, CVE-2017-7802, CVE-2017-7803, CVE-2017-7807, CVE-2017-7809) A buffer overflow was discovered when displaying SVG content in some circumstances. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code. (CVE-2017-7786)
References: https://ubuntu.com/security/notices/USN-3416-1, https://ubuntu.com/security/CVE-2017-7753, https://ubuntu.com/security/CVE-2017-7779, https://ubuntu.com/security/CVE-2017-7784, https://ubuntu.com/security/CVE-2017-7785, https://ubuntu.com/security/CVE-2017-7786, https://ubuntu.com/security/CVE-2017-7787, https://ubuntu.com/security/CVE-2017-7791, https://ubuntu.com/security/CVE-2017-7792, https://ubuntu.com/security/CVE-2017-7800, https://ubuntu.com/security/CVE-2017-7801, https://ubuntu.com/security/CVE-2017-7802, https://ubuntu.com/security/CVE-2017-7803, https://ubuntu.com/security/CVE-2017-7807, https://ubuntu.com/security/CVE-2017-7809
Affected packages
Package
Name: thunderbird
Purl: pkg:deb/ubuntu/thunderbird@1:52.3.0+build1-0ubuntu0.14.04.1?arch=source&distro=trusty
Affected ranges
Type: ECOSYSTEM
Events:
