Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.813049
Categoría:General
Título:Mozilla Thunderbird Security Updates(mfsa_2018-04_2018-04)-Windows
Resumen:Mozilla Thunderbird is prone to multiple vulnerabilities.
Descripción:Summary:
Mozilla Thunderbird is prone to multiple vulnerabilities.

Vulnerability Insight:
Multiple flaws exist due to:

- An integer overflow error in Skia library during edge builder allocation.

- An use-after-free error while editing form elements.

- An use-after-free error when source document is manipulated during XSLT.

- An use-after-free error while manipulating form input elements.

- An use-after-free error with widget listener.

- An use-after-free error when manipulating HTML media elements.

- An use-after-free error during mouse event handling.

- An use-after-free error during font face manipulation.

- An url spoofing with right-to-left text aligned left-to-right.

- Memory safety bugs.

Vulnerability Impact:
Successful exploitation will allow
attackers to bypass security restrictions and perform unauthorized
actions, conduct spoofing attack, and execute arbitrary code in the
context of the affected application.

Affected Software/OS:
Mozilla Thunderbird version before 52.6 on Windows.

Solution:
Upgrade to Mozilla Thunderbird version 52.6
or later.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2018-5095
BugTraq ID: 102783
http://www.securityfocus.com/bid/102783
Debian Security Information: DSA-4096 (Google Search)
https://www.debian.org/security/2018/dsa-4096
Debian Security Information: DSA-4102 (Google Search)
https://www.debian.org/security/2018/dsa-4102
https://lists.debian.org/debian-lts-announce/2018/01/msg00030.html
https://lists.debian.org/debian-lts-announce/2018/01/msg00036.html
RedHat Security Advisories: RHSA-2018:0122
https://access.redhat.com/errata/RHSA-2018:0122
RedHat Security Advisories: RHSA-2018:0262
https://access.redhat.com/errata/RHSA-2018:0262
http://www.securitytracker.com/id/1040270
https://usn.ubuntu.com/3544-1/
Common Vulnerability Exposure (CVE) ID: CVE-2018-5096
BugTraq ID: 102771
http://www.securityfocus.com/bid/102771
Common Vulnerability Exposure (CVE) ID: CVE-2018-5097
Common Vulnerability Exposure (CVE) ID: CVE-2018-5098
Common Vulnerability Exposure (CVE) ID: CVE-2018-5099
Common Vulnerability Exposure (CVE) ID: CVE-2018-5102
Common Vulnerability Exposure (CVE) ID: CVE-2018-5103
Common Vulnerability Exposure (CVE) ID: CVE-2018-5104
Common Vulnerability Exposure (CVE) ID: CVE-2018-5117
Common Vulnerability Exposure (CVE) ID: CVE-2018-5089
https://usn.ubuntu.com/3688-1/
CopyrightCopyright (C) 2018 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.