csaf_redhat - rhsa-2017

rhsa-2017_1201

Vulnerability from csaf_redhat

Published

2017-05-08 06:45

Modified

2024-11-05 20:00

Summary

Red Hat Security Advisory: thunderbird security update

Notes

Topic

An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.1.0. Security Fix(es): * Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2017-5429, CVE-2017-5433, CVE-2017-5435, CVE-2017-5436, CVE-2017-5459, CVE-2017-5466, CVE-2017-5432, CVE-2017-5434, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5446, CVE-2017-5447, CVE-2017-5454, CVE-2017-5460, CVE-2017-5464, CVE-2017-5465, CVE-2017-5469, CVE-2016-10195, CVE-2016-10196, CVE-2017-5445, CVE-2017-5449, CVE-2017-5451, CVE-2017-5467, CVE-2016-10197) Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Petr Cerny, Nils, Ivan Fratric (Google Project Zero), Takeshi Terada, Heather Miller (Google Skia team), Chun Han Hsiao, Chamal De Silva, Nicolas Grégoire, Holger Fuhrmannek, Atte Kettunen, Haik Aftandilian, and Jordi Chancel as the original reporters.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for thunderbird is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis update upgrades Thunderbird to version 52.1.0.\n\nSecurity Fix(es):\n\n* Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2017-5429, CVE-2017-5433, CVE-2017-5435, CVE-2017-5436, CVE-2017-5459, CVE-2017-5466, CVE-2017-5432, CVE-2017-5434, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5446, CVE-2017-5447, CVE-2017-5454, CVE-2017-5460, CVE-2017-5464, CVE-2017-5465, CVE-2017-5469, CVE-2016-10195, CVE-2016-10196, CVE-2017-5445, CVE-2017-5449, CVE-2017-5451, CVE-2017-5467, CVE-2016-10197)\n\nRed Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Petr Cerny, Nils, Ivan Fratric (Google Project Zero), Takeshi Terada, Heather Miller (Google Skia team), Chun Han Hsiao, Chamal De Silva, Nicolas Gr\u00e9goire, Holger Fuhrmannek, Atte Kettunen, Haik Aftandilian, and Jordi Chancel as the original reporters.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2017:1201",
        "url": "https://access.redhat.com/errata/RHSA-2017:1201"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-13",
        "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-13"
      },
      {
        "category": "external",
        "summary": "1418608",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418608"
      },
      {
        "category": "external",
        "summary": "1418611",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418611"
      },
      {
        "category": "external",
        "summary": "1418612",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418612"
      },
      {
        "category": "external",
        "summary": "1443298",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443298"
      },
      {
        "category": "external",
        "summary": "1443299",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443299"
      },
      {
        "category": "external",
        "summary": "1443301",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443301"
      },
      {
        "category": "external",
        "summary": "1443303",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443303"
      },
      {
        "category": "external",
        "summary": "1443304",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443304"
      },
      {
        "category": "external",
        "summary": "1443305",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443305"
      },
      {
        "category": "external",
        "summary": "1443307",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443307"
      },
      {
        "category": "external",
        "summary": "1443308",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443308"
      },
      {
        "category": "external",
        "summary": "1443311",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443311"
      },
      {
        "category": "external",
        "summary": "1443312",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443312"
      },
      {
        "category": "external",
        "summary": "1443313",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443313"
      },
      {
        "category": "external",
        "summary": "1443314",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443314"
      },
      {
        "category": "external",
        "summary": "1443315",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443315"
      },
      {
        "category": "external",
        "summary": "1443317",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443317"
      },
      {
        "category": "external",
        "summary": "1443322",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443322"
      },
      {
        "category": "external",
        "summary": "1443323",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443323"
      },
      {
        "category": "external",
        "summary": "1443324",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443324"
      },
      {
        "category": "external",
        "summary": "1443325",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443325"
      },
      {
        "category": "external",
        "summary": "1443327",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443327"
      },
      {
        "category": "external",
        "summary": "1443328",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443328"
      },
      {
        "category": "external",
        "summary": "1443329",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443329"
      },
      {
        "category": "external",
        "summary": "1443330",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443330"
      },
      {
        "category": "external",
        "summary": "1443332",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443332"
      },
      {
        "category": "external",
        "summary": "1443333",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443333"
      },
      {
        "category": "external",
        "summary": "1443338",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443338"
      },
      {
        "category": "external",
        "summary": "1443340",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443340"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1201.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-05T20:00:31+00:00",
      "generator": {
        "date": "2024-11-05T20:00:31+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.1.1"
        }
      },
      "id": "RHSA-2017:1201",
      "initial_release_date": "2017-05-08T06:45:45+00:00",
      "revision_history": [
        {
          "date": "2017-05-08T06:45:45+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2017-05-08T06:45:45+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-05T20:00:31+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop (v. 6)",
                  "product_id": "6Client-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 6)",
                  "product_id": "6Server-optional-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 6)",
                  "product_id": "6Workstation-6.9.z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Client (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Client (v. 7)",
                  "product_id": "7Client-7.3.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::client"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Server Optional (v. 7)",
                  "product_id": "7Server-optional-7.3.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::server"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                "product": {
                  "name": "Red Hat Enterprise Linux Workstation (v. 7)",
                  "product_id": "7Workstation-7.3.Z",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:52.1.0-1.el6_9.x86_64",
                "product": {
                  "name": "thunderbird-0:52.1.0-1.el6_9.x86_64",
                  "product_id": "thunderbird-0:52.1.0-1.el6_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@52.1.0-1.el6_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
                  "product_id": "thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@52.1.0-1.el6_9?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:52.1.0-1.el7_3.x86_64",
                "product": {
                  "name": "thunderbird-0:52.1.0-1.el7_3.x86_64",
                  "product_id": "thunderbird-0:52.1.0-1.el7_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@52.1.0-1.el7_3?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
                  "product_id": "thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@52.1.0-1.el7_3?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:52.1.0-1.el6_9.src",
                "product": {
                  "name": "thunderbird-0:52.1.0-1.el6_9.src",
                  "product_id": "thunderbird-0:52.1.0-1.el6_9.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@52.1.0-1.el6_9?arch=src"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-0:52.1.0-1.el7_3.src",
                "product": {
                  "name": "thunderbird-0:52.1.0-1.el7_3.src",
                  "product_id": "thunderbird-0:52.1.0-1.el7_3.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@52.1.0-1.el7_3?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:52.1.0-1.el6_9.i686",
                "product": {
                  "name": "thunderbird-0:52.1.0-1.el6_9.i686",
                  "product_id": "thunderbird-0:52.1.0-1.el6_9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@52.1.0-1.el6_9?arch=i686"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
                "product": {
                  "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
                  "product_id": "thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@52.1.0-1.el6_9?arch=i686"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:52.1.0-1.el6_9.s390x",
                "product": {
                  "name": "thunderbird-0:52.1.0-1.el6_9.s390x",
                  "product_id": "thunderbird-0:52.1.0-1.el6_9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@52.1.0-1.el6_9?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
                  "product_id": "thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@52.1.0-1.el6_9?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:52.1.0-1.el6_9.ppc64",
                "product": {
                  "name": "thunderbird-0:52.1.0-1.el6_9.ppc64",
                  "product_id": "thunderbird-0:52.1.0-1.el6_9.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@52.1.0-1.el6_9?arch=ppc64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
                "product": {
                  "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
                  "product_id": "thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@52.1.0-1.el6_9?arch=ppc64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:52.1.0-1.el7_3.ppc64le",
                "product": {
                  "name": "thunderbird-0:52.1.0-1.el7_3.ppc64le",
                  "product_id": "thunderbird-0:52.1.0-1.el7_3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@52.1.0-1.el7_3?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
                "product": {
                  "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
                  "product_id": "thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@52.1.0-1.el7_3?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:52.1.0-1.el7_3.aarch64",
                "product": {
                  "name": "thunderbird-0:52.1.0-1.el7_3.aarch64",
                  "product_id": "thunderbird-0:52.1.0-1.el7_3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@52.1.0-1.el7_3?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
                "product": {
                  "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
                  "product_id": "thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@52.1.0-1.el7_3?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.i686",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.ppc64",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.s390x",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.src",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.x86_64",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
          "product_id": "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
        "relates_to_product_reference": "6Client-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.i686",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.ppc64",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.s390x",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.src",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.x86_64",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
          "product_id": "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
        "relates_to_product_reference": "6Server-optional-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.i686",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.ppc64",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.s390x",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.src",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
          "product_id": "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
        "relates_to_product_reference": "6Workstation-6.9.z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.aarch64",
        "relates_to_product_reference": "7Client-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.ppc64le",
        "relates_to_product_reference": "7Client-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.src as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.src",
        "relates_to_product_reference": "7Client-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.x86_64",
        "relates_to_product_reference": "7Client-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
        "relates_to_product_reference": "7Client-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
        "relates_to_product_reference": "7Client-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)",
          "product_id": "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
        "relates_to_product_reference": "7Client-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.aarch64",
        "relates_to_product_reference": "7Server-optional-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.src",
        "relates_to_product_reference": "7Server-optional-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.x86_64",
        "relates_to_product_reference": "7Server-optional-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
        "relates_to_product_reference": "7Server-optional-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
        "relates_to_product_reference": "7Server-optional-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)",
          "product_id": "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
        "relates_to_product_reference": "7Server-optional-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.aarch64",
        "relates_to_product_reference": "7Workstation-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.ppc64le",
        "relates_to_product_reference": "7Workstation-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.src as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.src",
        "relates_to_product_reference": "7Workstation-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:52.1.0-1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64"
        },
        "product_reference": "thunderbird-0:52.1.0-1.el7_3.x86_64",
        "relates_to_product_reference": "7Workstation-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
        "relates_to_product_reference": "7Workstation-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
        "relates_to_product_reference": "7Workstation-7.3.Z"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)",
          "product_id": "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
        "relates_to_product_reference": "7Workstation-7.3.Z"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-10195",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2017-01-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1418608"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in libevent with the parsing of DNS requests and replies.  An attacker could send a forged DNS response to an application using libevent which could lead to reading data out of bounds on the heap, potentially disclosing a small amount of application memory.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libevent: Stack-buffer overflow in the name_parse() function",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-10195"
        },
        {
          "category": "external",
          "summary": "RHBZ#1418608",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418608"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-10195",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-10195"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-10195",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10195"
        }
      ],
      "release_date": "2016-01-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libevent: Stack-buffer overflow in the name_parse() function"
    },
    {
      "cve": "CVE-2016-10196",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "discovery_date": "2017-01-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1418611"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in libevent with the parsing of IPv6 addresses. If an attacker could cause an application using libevent to parse a malformed address in IPv6 notation of more than 2GiB in length, a stack overflow would occur leading to a crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-10196"
        },
        {
          "category": "external",
          "summary": "RHBZ#1418611",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418611"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-10196",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-10196"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-10196",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10196"
        }
      ],
      "release_date": "2016-01-27T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()"
    },
    {
      "cve": "CVE-2016-10197",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2017-01-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1418612"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out of bounds read vulnerability was found in libevent in the search_make_new function.  If an attacker could cause an application using libevent to attempt resolving an empty hostname, an out of bounds read could occur possibly leading to a crash.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libevent: Out-of-bounds read in search_make_new()",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2016-10197"
        },
        {
          "category": "external",
          "summary": "RHBZ#1418612",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1418612"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2016-10197",
          "url": "https://www.cve.org/CVERecord?id=CVE-2016-10197"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-10197",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-10197"
        }
      ],
      "release_date": "2016-03-03T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "libevent: Out-of-bounds read in search_make_new()"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        }
      ],
      "cve": "CVE-2017-5429",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443301"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1 (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5429"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443301",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443301"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5429",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5429"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5429",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5429"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5429",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5429"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1 (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5432",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443332"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free in text input selection (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5432"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443332",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443332"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5432",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5432"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5432",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5432"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5432",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5432"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free in text input selection (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5433",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443330"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free in SMIL animation functions (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5433"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443330",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443330"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5433",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5433"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5433",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5433"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5433",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5433"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free in SMIL animation functions (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5434",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443329"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free during focus handling (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5434"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443329",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443329"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5434",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5434"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5434",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5434"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5434",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5434"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free during focus handling (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5435",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443328"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free during transaction processing in the editor (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5435"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443328",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443328"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5435",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5435"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5435",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5435"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5435",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5435"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Use-after-free during transaction processing in the editor (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Holger Fuhrmannek"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5436",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443327"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Out-of-bounds write with malicious font in Graphite 2 (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5436"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443327",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443327"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5436",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5436"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5436",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5436"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5436",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5436"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Out-of-bounds write with malicious font in Graphite 2 (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nicolas Gr\u00e9goire"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5438",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443325"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free in nsAutoPtr during XSLT processing (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5438"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443325",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443325"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5438",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5438"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5438",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5438"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5438",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5438"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free in nsAutoPtr during XSLT processing (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nicolas Gr\u00e9goire"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5439",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443324"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free in nsTArray Length() during XSLT processing (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5439"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443324",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443324"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5439",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5439"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5439",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5439"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5439",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5439"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free in nsTArray Length() during XSLT processing (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nicolas Gr\u00e9goire"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5440",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443322"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free in txExecutionState destructor during XSLT processing (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5440"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443322",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443322"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5440",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5440"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5440",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5440"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5440",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5440"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free in txExecutionState destructor during XSLT processing (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5441",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443323"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free with selection during scroll events (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5441"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443323",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443323"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5441",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5441"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5441",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5441"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5441",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5441"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free with selection during scroll events (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5442",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443298"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free during style changes (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5442"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443298",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443298"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5442",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5442"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5442",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5442"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5442",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5442"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free during style changes (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Chamal De Silva"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5443",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443299"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Out-of-bounds write during BinHex decoding (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5443"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443299",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443299"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5443",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5443"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5443",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5443"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5443",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5443"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Out-of-bounds write during BinHex decoding (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Chamal De Silva"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5444",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443314"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow vulnerability while parsing \"application/http-index-format\" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Buffer overflow while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5444"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443314",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443314"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5444",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5444"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5444",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5444"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5444",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5444"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Buffer overflow while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Chamal De Silva"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5445",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443315"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability while parsing \"application/http-index-format\" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Uninitialized values used while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5445"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443315",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443315"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5445",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5445"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5445",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5445"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5445",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5445"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Uninitialized values used while parsing application/http-index-format content (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Chun Han Hsiao"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5446",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443312"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read when an HTTP/2 connection to a servers sends \"DATA\" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5446"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443312",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443312"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5446",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5446"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5446",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5446"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5446",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5446"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Ivan Fratric"
          ],
          "organization": "Google Project Zero",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5447",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443313"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Out-of-bounds read during glyph processing (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5447"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443313",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443313"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5447",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5447"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5447",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5447"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5447",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5447"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Out-of-bounds read during glyph processing (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5449",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443311"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Crash during bidirectional unicode manipulation with animation (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5449"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443311",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443311"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5449",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5449"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5449",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5449"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5449",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5449"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Crash during bidirectional unicode manipulation with animation (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Jordi Chancel"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5451",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443340"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A mechanism to spoof the addressbar through the user interaction on the addressbar and the \"onblur\" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Addressbar spoofing with onblur event (MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5451"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443340",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443340"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5451",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5451"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5451",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5451"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5451",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5451"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Addressbar spoofing with onblur event (MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Haik Aftandilian"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5454",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Sandbox escape allowing file system read access through file picker (MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5454"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5454",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5454"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5454",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5454"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5454",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5454"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Sandbox escape allowing file system read access through file picker (MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Atte Kettunen"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5459",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443333"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Buffer overflow in WebGL (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5459"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443333",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443333"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5459",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5459"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5459",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5459"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5459",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5459"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Buffer overflow in WebGL (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5460",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443308"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Use-after-free in frame selection (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5460"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443308",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443308"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5460",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5460"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5460",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5460"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5460",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5460"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Use-after-free in frame selection (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Nils"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5464",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443303"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory corruption with accessibility and DOM manipulation (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5464"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443303",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443303"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5464",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5464"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5464",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5464"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5464",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5464"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Memory corruption with accessibility and DOM manipulation (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Ivan Fratric"
          ],
          "organization": "Google Project Zero",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5465",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443304"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An out-of-bounds read while processing SVG content in \"ConvolvePixel\". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Out-of-bounds read in ConvolvePixel (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5465"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443304",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443304"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5465",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5465"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5465",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5465"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5465",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5465"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Out-of-bounds read in ConvolvePixel (MFSA 2017-11, MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Takeshi Terada"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5466",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443305"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "If a page is loaded from an original site through a hyperlink and contains a redirect to a \"data:text/html\" URL, triggering a reload will run the reloaded \"data:text/html\" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Origin confusion when reloading isolated data:text/html URL (MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5466"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443305",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443305"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5466",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5466"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5466",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5466"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5466",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5466"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "Mozilla: Origin confusion when reloading isolated data:text/html URL (MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Heather Miller"
          ],
          "organization": "Google Skia team",
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5467",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443307"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Memory corruption when drawing Skia content (MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5467"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443307",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443307"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5467",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5467"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5467",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5467"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5467",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5467"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "Mozilla: Memory corruption when drawing Skia content (MFSA 2017-12)"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "the Mozilla project"
          ]
        },
        {
          "names": [
            "Petr Cerny"
          ],
          "summary": "Acknowledged by upstream."
        }
      ],
      "cve": "CVE-2017-5469",
      "discovery_date": "2017-04-19T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1443317"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "Mozilla: Potential Buffer overflow in flex-generated code (MFSA 2017-11, MFSA 2017-12)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
          "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
          "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
          "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
          "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2017-5469"
        },
        {
          "category": "external",
          "summary": "RHBZ#1443317",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1443317"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2017-5469",
          "url": "https://www.cve.org/CVERecord?id=CVE-2017-5469"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2017-5469",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-5469"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5469",
          "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5469"
        }
      ],
      "release_date": "2017-04-19T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2017-05-08T06:45:45+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAll running instances of Thunderbird must be restarted for the update to take effect.",
          "product_ids": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Client-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Client-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Server-optional-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Server-optional-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.src",
            "6Workstation-6.9.z:thunderbird-0:52.1.0-1.el6_9.x86_64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.i686",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.ppc64",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.s390x",
            "6Workstation-6.9.z:thunderbird-debuginfo-0:52.1.0-1.el6_9.x86_64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Client-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Client-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Server-optional-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Server-optional-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.src",
            "7Workstation-7.3.Z:thunderbird-0:52.1.0-1.el7_3.x86_64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.aarch64",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.ppc64le",
            "7Workstation-7.3.Z:thunderbird-debuginfo-0:52.1.0-1.el7_3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "Mozilla: Potential Buffer overflow in flex-generated code (MFSA 2017-11, MFSA 2017-12)"
    }
  ]
}

cve-2017-5467

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1347262	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.669Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347262"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory corruption when drawing Skia content",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347262"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5467",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Memory corruption when drawing Skia content"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347262",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347262"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5467",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.669Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5433

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1347168	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.351Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347168"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in SMIL animation functions",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347168"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5433",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free in SMIL animation functions"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347168",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347168"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5433",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.351Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5438

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1336828	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.387Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336828"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in nsAutoPtr during XSLT processing",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336828"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5438",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free in nsAutoPtr during XSLT processing"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336828",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336828"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5438",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.387Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5444

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1344461	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.255Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344461"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow vulnerability while parsing \"application/http-index-format\" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer overflow while parsing application/http-index-format content",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344461"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5444",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A buffer overflow vulnerability while parsing \"application/http-index-format\" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer overflow while parsing application/http-index-format content"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344461",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344461"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5444",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.255Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5435

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1350683	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.382Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1350683"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free during transaction processing in the editor",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1350683"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5435",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free during transaction processing in the editor"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1350683",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1350683"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5435",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.382Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5466

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1353975	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.760Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1353975"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "If a page is loaded from an original site through a hyperlink and contains a redirect to a \"data:text/html\" URL, triggering a reload will run the reloaded \"data:text/html\" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Origin confusion when reloading isolated data:text/html URL",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1353975"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5466",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "If a page is loaded from an original site through a hyperlink and contains a redirect to a \"data:text/html\" URL, triggering a reload will run the reloaded \"data:text/html\" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Origin confusion when reloading isolated data:text/html URL"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1353975",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1353975"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5466",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.760Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5439

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1336830	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/103053	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.287Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336830"
          },
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "name": "103053",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103053"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in nsTArray Length() during XSLT processing",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336830"
        },
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "name": "103053",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103053"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5439",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free in nsTArray Length() during XSLT processing"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336830",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336830"
            },
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "103053",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103053"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5439",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.287Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5432

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1346654	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.350Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1346654"
          },
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in text input selection",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1346654"
        },
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5432",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free in text input selection"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1346654",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1346654"
            },
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5432",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.350Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5446

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1343505	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.345Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343505"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read when an HTTP/2 connection to a servers sends \"DATA\" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343505"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5446",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An out-of-bounds read when an HTTP/2 connection to a servers sends \"DATA\" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343505",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343505"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5446",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.345Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5459

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1333858	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.987Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1333858"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Buffer overflow in WebGL",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1333858"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5459",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Buffer overflow in WebGL"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1333858",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1333858"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5459",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.987Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5464

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1347075	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.303Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347075"
          },
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory corruption with accessibility and DOM manipulation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347075"
        },
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5464",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Memory corruption with accessibility and DOM manipulation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347075",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347075"
            },
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5464",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.303Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5449

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1340127	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.706Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1340127"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Crash during bidirectional unicode manipulation with animation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1340127"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5449",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Crash during bidirectional unicode manipulation with animation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1340127",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1340127"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5449",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.706Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5469

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1292534	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.693Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1292534"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential Buffer overflow in flex-generated code",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1292534"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5469",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Potential Buffer overflow in flex-generated code"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1292534",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1292534"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5469",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.693Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-10196

Vulnerability from cvelistv5

Published

2017-03-15 15:00

Modified

2024-08-06 03:14

Severity ?

Summary

Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/96014	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	http://www.debian.org/security/2017/dsa-3789	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2017/02/02/7	mailing-list, x_refsource_MLIST
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201705-01	vendor-advisory, x_refsource_GENTOO
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/01/31/17	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1343453	x_refsource_CONFIRM
	https://github.com/libevent/libevent/issues/318	x_refsource_CONFIRM
	https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:14:42.884Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96014",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96014"
          },
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "name": "DSA-3789",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3789"
          },
          {
            "name": "[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/02/7"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "name": "GLSA-201705-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "[oss-security] 20170131 Bugs fixed in libevent 2.1.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/31/17"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343453"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libevent/libevent/issues/318"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-11T20:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "96014",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96014"
        },
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "name": "DSA-3789",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3789"
        },
        {
          "name": "[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/02/7"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "name": "GLSA-201705-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "[oss-security] 20170131 Bugs fixed in libevent 2.1.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/31/17"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343453"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libevent/libevent/issues/318"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-10196",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96014",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96014"
            },
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "DSA-3789",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3789"
            },
            {
              "name": "[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/02/7"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "GLSA-201705-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-01"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "[oss-security] 20170131 Bugs fixed in libevent 2.1.6",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/01/31/17"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343453",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343453"
            },
            {
              "name": "https://github.com/libevent/libevent/issues/318",
              "refsource": "CONFIRM",
              "url": "https://github.com/libevent/libevent/issues/318"
            },
            {
              "name": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog",
              "refsource": "CONFIRM",
              "url": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5",
              "refsource": "CONFIRM",
              "url": "https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-10196",
    "datePublished": "2017-03-15T15:00:00",
    "dateReserved": "2017-02-01T00:00:00",
    "dateUpdated": "2024-08-06T03:14:42.884Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5440

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1336832	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.254Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336832"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in txExecutionState destructor during XSLT processing",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336832"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5440",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free in txExecutionState destructor during XSLT processing"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336832",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1336832"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5440",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.254Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5460

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1343642	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.885Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343642"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free in frame selection",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343642"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5460",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free in frame selection"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343642",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343642"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5460",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.885Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5443

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1342661	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.404Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1342661"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds write during BinHex decoding",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1342661"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5443",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Out-of-bounds write during BinHex decoding"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1342661",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1342661"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5443",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.404Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-10197

Vulnerability from cvelistv5

Published

2017-03-15 15:00

Modified

2024-08-06 03:14

Severity ?

Summary

The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/96014	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3789	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2017/02/02/7	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201705-01	vendor-advisory, x_refsource_GENTOO
	https://github.com/libevent/libevent/issues/332	x_refsource_CONFIRM
	https://github.com/libevent/libevent/commit/ec65c42052d95d2c23d1d837136d1cf1d9ecef9e	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/01/31/17	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:14:42.418Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96014",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96014"
          },
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "name": "DSA-3789",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3789"
          },
          {
            "name": "[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/02/7"
          },
          {
            "name": "GLSA-201705-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libevent/libevent/issues/332"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libevent/libevent/commit/ec65c42052d95d2c23d1d837136d1cf1d9ecef9e"
          },
          {
            "name": "[oss-security] 20170131 Bugs fixed in libevent 2.1.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/31/17"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "96014",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96014"
        },
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "name": "DSA-3789",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3789"
        },
        {
          "name": "[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/02/7"
        },
        {
          "name": "GLSA-201705-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libevent/libevent/issues/332"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libevent/libevent/commit/ec65c42052d95d2c23d1d837136d1cf1d9ecef9e"
        },
        {
          "name": "[oss-security] 20170131 Bugs fixed in libevent 2.1.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/31/17"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-10197",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96014",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96014"
            },
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "DSA-3789",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3789"
            },
            {
              "name": "[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/02/7"
            },
            {
              "name": "GLSA-201705-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-01"
            },
            {
              "name": "https://github.com/libevent/libevent/issues/332",
              "refsource": "CONFIRM",
              "url": "https://github.com/libevent/libevent/issues/332"
            },
            {
              "name": "https://github.com/libevent/libevent/commit/ec65c42052d95d2c23d1d837136d1cf1d9ecef9e",
              "refsource": "CONFIRM",
              "url": "https://github.com/libevent/libevent/commit/ec65c42052d95d2c23d1d837136d1cf1d9ecef9e"
            },
            {
              "name": "[oss-security] 20170131 Bugs fixed in libevent 2.1.6",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/01/31/17"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog",
              "refsource": "CONFIRM",
              "url": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-10197",
    "datePublished": "2017-03-15T15:00:00",
    "dateReserved": "2017-02-01T00:00:00",
    "dateUpdated": "2024-08-06T03:14:42.418Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5434

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1349946	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.581Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1349946"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free during focus handling",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1349946"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5434",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free during focus handling"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1349946",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1349946"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5434",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.581Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5441

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1343795	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.383Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343795"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free with selection during scroll events",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343795"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5441",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free with selection during scroll events"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343795",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343795"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5441",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.383Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5447

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://www.exploit-db.com/exploits/42071/	exploit, x_refsource_EXPLOIT-DB
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1343552	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.298Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "42071",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/42071/"
          },
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343552"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds read during glyph processing",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "42071",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/42071/"
        },
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343552"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5447",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Out-of-bounds read during glyph processing"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "42071",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/42071/"
            },
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343552",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1343552"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5447",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.298Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5442

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1347979	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.646Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347979"
          },
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Use-after-free during style changes",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347979"
        },
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5442",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Use-after-free during style changes"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347979",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347979"
            },
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5442",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.646Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5436

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201706-25	vendor-advisory, x_refsource_GENTOO
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1345461	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.420Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "name": "GLSA-201706-25",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201706-25"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1345461"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds write with malicious font in Graphite 2",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "name": "GLSA-201706-25",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201706-25"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1345461"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5436",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Out-of-bounds write with malicious font in Graphite 2"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "GLSA-201706-25",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201706-25"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1345461",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1345461"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5436",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.420Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5451

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1273537	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.698Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1273537"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A mechanism to spoof the addressbar through the user interaction on the addressbar and the \"onblur\" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Addressbar spoofing with onblur event",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1273537"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5451",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A mechanism to spoof the addressbar through the user interaction on the addressbar and the \"onblur\" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Addressbar spoofing with onblur event"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1273537",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1273537"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5451",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.698Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5454

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://bugzilla.mozilla.org/show_bug.cgi?id=1349276	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.622Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1349276"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Sandbox escape allowing file system read access through file picker",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1349276"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5454",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Sandbox escape allowing file system read access through file picker"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1349276",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1349276"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5454",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.622Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5465

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/show_bug.cgi?id=1347617	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.exploit-db.com/exploits/42072/	exploit, x_refsource_EXPLOIT-DB
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.672Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347617"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "42072",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/42072/"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "An out-of-bounds read while processing SVG content in \"ConvolvePixel\". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Out-of-bounds read in ConvolvePixel",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347617"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "42072",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/42072/"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5465",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An out-of-bounds read while processing SVG content in \"ConvolvePixel\". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Out-of-bounds read in ConvolvePixel"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347617",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1347617"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "42072",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/42072/"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5465",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.672Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5445

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.mozilla.org/show_bug.cgi?id=1344467	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:13.330Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344467"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability while parsing \"application/http-index-format\" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Uninitialized values used while parsing application/http-index-format content",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344467"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5445",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability while parsing \"application/http-index-format\" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Uninitialized values used while parsing application/http-index-format content"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344467",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1344467"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5445",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:13.330Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2016-10195

Vulnerability from cvelistv5

Published

2017-03-15 15:00

Modified

2024-08-06 03:14

Severity ?

Summary

The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/96014	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	http://www.debian.org/security/2017/dsa-3789	vendor-advisory, x_refsource_DEBIAN
	http://www.openwall.com/lists/oss-security/2017/02/02/7	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201705-01	vendor-advisory, x_refsource_GENTOO
	https://github.com/libevent/libevent/issues/317	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/01/31/17	mailing-list, x_refsource_MLIST
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://github.com/libevent/libevent/commit/96f64a022014a208105ead6c8a7066018449d86d	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	n/a	n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:14:42.465Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "96014",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96014"
          },
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "name": "DSA-3789",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3789"
          },
          {
            "name": "[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/02/7"
          },
          {
            "name": "GLSA-201705-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201705-01"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libevent/libevent/issues/317"
          },
          {
            "name": "[oss-security] 20170131 Bugs fixed in libevent 2.1.6",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/31/17"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/libevent/libevent/commit/96f64a022014a208105ead6c8a7066018449d86d"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-31T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-04T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "96014",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96014"
        },
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "name": "DSA-3789",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3789"
        },
        {
          "name": "[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/02/7"
        },
        {
          "name": "GLSA-201705-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201705-01"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libevent/libevent/issues/317"
        },
        {
          "name": "[oss-security] 20170131 Bugs fixed in libevent 2.1.6",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/31/17"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/libevent/libevent/commit/96f64a022014a208105ead6c8a7066018449d86d"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-10195",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "96014",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96014"
            },
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "DSA-3789",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3789"
            },
            {
              "name": "[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/02/7"
            },
            {
              "name": "GLSA-201705-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201705-01"
            },
            {
              "name": "https://github.com/libevent/libevent/issues/317",
              "refsource": "CONFIRM",
              "url": "https://github.com/libevent/libevent/issues/317"
            },
            {
              "name": "[oss-security] 20170131 Bugs fixed in libevent 2.1.6",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/01/31/17"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog",
              "refsource": "CONFIRM",
              "url": "https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "https://github.com/libevent/libevent/commit/96f64a022014a208105ead6c8a7066018449d86d",
              "refsource": "CONFIRM",
              "url": "https://github.com/libevent/libevent/commit/96f64a022014a208105ead6c8a7066018449d86d"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-10195",
    "datePublished": "2017-03-15T15:00:00",
    "dateReserved": "2017-02-01T00:00:00",
    "dateUpdated": "2024-08-06T03:14:42.465Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2017-5429

Vulnerability from cvelistv5

Published

2018-06-11 21:00

Modified

2024-08-05 15:04

Severity ?

Summary

Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2017:1106	vendor-advisory, x_refsource_REDHAT
	https://www.mozilla.org/security/advisories/mfsa2017-12/	x_refsource_CONFIRM
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1343261%2C1350844%2C1341096%2C1342823%2C1348894%2C1348941%2C1349340%2C1352926%2C1353088%2C	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-11/	x_refsource_CONFIRM
	https://www.mozilla.org/security/advisories/mfsa2017-10/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/97940	vdb-entry, x_refsource_BID
	https://www.debian.org/security/2017/dsa-3831	vendor-advisory, x_refsource_DEBIAN
	https://www.mozilla.org/security/advisories/mfsa2017-13/	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1038320	vdb-entry, x_refsource_SECTRACK
	https://access.redhat.com/errata/RHSA-2017:1104	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2017:1201	vendor-advisory, x_refsource_REDHAT

Impacted products

▼	Vendor	Product
	Mozilla	Thunderbird
	Mozilla	Firefox ESR
	Mozilla	Firefox

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:04:14.380Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1106"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1343261%2C1350844%2C1341096%2C1342823%2C1348894%2C1348941%2C1349340%2C1352926%2C1353088%2C"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
          },
          {
            "name": "97940",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/97940"
          },
          {
            "name": "DSA-3831",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2017/dsa-3831"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
          },
          {
            "name": "1038320",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038320"
          },
          {
            "name": "RHSA-2017:1104",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1104"
          },
          {
            "name": "RHSA-2017:1201",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:1201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "45.9",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "52.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "53",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2017-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, Firefox ESR 52.1, and Thunderbird 52.1",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-12T09:57:01",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "RHSA-2017:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1106"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1343261%2C1350844%2C1341096%2C1342823%2C1348894%2C1348941%2C1349340%2C1352926%2C1353088%2C"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
        },
        {
          "name": "97940",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/97940"
        },
        {
          "name": "DSA-3831",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2017/dsa-3831"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
        },
        {
          "name": "1038320",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1038320"
        },
        {
          "name": "RHSA-2017:1104",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1104"
        },
        {
          "name": "RHSA-2017:1201",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:1201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2017-5429",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "45.9"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_value": "52.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "53"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird \u003c 52.1, Firefox ESR \u003c 45.9, Firefox ESR \u003c 52.1, and Firefox \u003c 53."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, Firefox ESR 52.1, and Thunderbird 52.1"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:1106",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1106"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-12/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-12/"
            },
            {
              "name": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1343261%2C1350844%2C1341096%2C1342823%2C1348894%2C1348941%2C1349340%2C1352926%2C1353088%2C",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1343261%2C1350844%2C1341096%2C1342823%2C1348894%2C1348941%2C1349340%2C1352926%2C1353088%2C"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-11/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-11/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-10/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-10/"
            },
            {
              "name": "97940",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/97940"
            },
            {
              "name": "DSA-3831",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2017/dsa-3831"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2017-13/",
              "refsource": "CONFIRM",
              "url": "https://www.mozilla.org/security/advisories/mfsa2017-13/"
            },
            {
              "name": "1038320",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1038320"
            },
            {
              "name": "RHSA-2017:1104",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1104"
            },
            {
              "name": "RHSA-2017:1201",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:1201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2017-5429",
    "datePublished": "2018-06-11T21:00:00",
    "dateReserved": "2017-01-13T00:00:00",
    "dateUpdated": "2024-08-05T15:04:14.380Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_redhat

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature