{"id":"CVE-2018-5144","aliases":["DEBIAN-CVE-2018-5144","DLA-1308-1","DLA-1327-1","DSA-4139-1","DSA-4155-1","EUVD-2018-16930","GHSA-4xfj-vf8f-vwpp","MGASA-2018-0202","MGASA-2018-0203","MGASA-2018-0207","MGASA-2018-0338","RHSA-2018:0526","RHSA-2018:0527","RHSA-2018:0647","RHSA-2018:0648","SUSE-SU-2018:0850-1","SUSE-SU-2018:0907-1","UBUNTU-CVE-2018-5144","USN-3545-1","openSUSE-SU-2018:0818-1","openSUSE-SU-2018:0819-1","openSUSE-SU-2024:10601-1"],"status":"published","title":"An integer overflow can occur during conversion of text to some Unicode character sets due to an...","description":"An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR \u003c 52.7 and Thunderbird \u003c 52.7.","severity":{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03198,"percentile":0.88208,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2018-03-15T00:00:00Z","modified":"2026-10-23T18:04:48Z","fixes":[{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["52.7.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["52.7.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["52.7.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:52.7.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:52.7.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:52.7.0-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","fixed_in":["1:52.7.0+build1-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","fixed_in":["1:52.7.0+build1-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","fixed_in":["1:52.7.0+build1-0ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.7.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.7.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.7.0-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.1esr-1~deb7u1"}]}],"versions":["45.0.1esr-1","45.0.2esr-1","45.0esr-1","45.0esr-2","45.1.0esr-1","45.1.1esr-1","45.2.0esr-1","45.2.0esr-1~deb7u1","45.2.0esr-1~deb8u1","45.3.0esr-1","45.3.0esr-1~deb7u1","45.3.0esr-1~deb8u1","45.3.0esr-2","45.4.0esr-1","45.4.0esr-1~deb7u1","45.4.0esr-1~deb7u2","45.4.0esr-1~deb8u1","45.4.0esr-1~deb8u2","45.4.0esr-2","45.5.0esr-1","45.5.0esr-1~deb8u1","45.5.1esr-1","45.5.1esr-1~deb7u1","45.5.1esr-1~deb8u1","45.6.0esr-1","45.6.0esr-1~deb7u1","45.6.0esr-1~deb8u1","45.7.0esr-1","45.7.0esr-1~deb7u1","45.7.0esr-1~deb8u1","45.7.0esr-2","45.7.0esr-3","45.7.0esr-4","45.8.0esr-1","45.8.0esr-1~deb7u1","45.8.0esr-1~deb8u1","45.9.0esr-1","45.9.0esr-1~deb7u1","45.9.0esr-1~deb8u1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1","52.2.0esr-1","52.2.0esr-1~deb7u1","52.2.0esr-1~deb8u1","52.2.0esr-1~deb9u1","52.2.0esr-2","52.3.0esr-1","52.3.0esr-1~deb7u1","52.3.0esr-1~deb8u1","52.3.0esr-1~deb8u2","52.3.0esr-1~deb9u1","52.3.0esr-2","52.4.0esr-1~deb8u1","52.4.0esr-1~deb9u1","52.4.0esr-2","52.4.0esr-2~deb7u1","52.5.0esr-1","52.5.0esr-1~deb7u1","52.5.0esr-1~deb8u1","52.5.0esr-1~deb9u1","52.5.2esr-1","52.5.2esr-1~deb7u1","52.5.2esr-1~deb8u1","52.5.2esr-1~deb9u1","52.5.3esr-1","52.6.0esr-1","52.6.0esr-1~deb7u1","52.6.0esr-1~deb8u1","52.6.0esr-1~deb9u1","52.6.0esr-2","52.6.0esr-2+alpha.1","52.6.0esr-2+alpha.2","52.7.0esr-1","52.7.0esr-1~deb8u1","52.7.0esr-1~deb9u1"],"bundled":7},{"source":"osv","ecosystem":"Debian:7","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.7.0-1~deb7u1"}]}],"versions":["1.5-4","1.5.0.2-1","1.5.0.2-2","1.5.0.2-3","1.5.0.4-1","1.5.0.4-2","1.5.0.4-3","1.5.0.5-1","1.5.0.7-1","1.5.0.7-2","1:52.4.0-1","1:52.4.0-1~deb7u1","1:52.4.0-1~deb8u1","1:52.4.0-1~deb9u1","1:52.4.0-2~exp1","1:52.5.0-1","1:52.5.0-1~deb7u1","1:52.5.0-1~deb8u1","1:52.5.0-1~deb9u1","1:52.5.2-1","1:52.5.2-1~deb7u1","1:52.5.2-2","1:52.5.2-2~deb8u1","1:52.5.2-2~deb9u1","1:52.6.0-1","1:52.6.0-1+alpha.1","1:52.6.0-1+alpha.2","1:52.6.0-1~deb7u1","1:52.6.0-1~deb8u1","1:52.6.0-1~deb9u1"],"bundled":6},{"source":"osv","ecosystem":"Debian:8","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.1esr-1~deb8u1"}]}],"versions":["45.0.1esr-1","45.0.2esr-1","45.0esr-1","45.0esr-2","45.1.0esr-1","45.1.1esr-1","45.2.0esr-1","45.2.0esr-1~deb7u1","45.2.0esr-1~deb8u1","45.3.0esr-1","45.3.0esr-1~deb7u1","45.3.0esr-1~deb8u1","45.3.0esr-2","45.4.0esr-1","45.4.0esr-1~deb7u1","45.4.0esr-1~deb7u2","45.4.0esr-1~deb8u1","45.4.0esr-1~deb8u2","45.4.0esr-2","45.5.0esr-1","45.5.0esr-1~deb8u1","45.5.1esr-1","45.5.1esr-1~deb7u1","45.5.1esr-1~deb8u1","45.6.0esr-1","45.6.0esr-1~deb7u1","45.6.0esr-1~deb8u1","45.7.0esr-1","45.7.0esr-1~deb7u1","45.7.0esr-1~deb8u1","45.7.0esr-2","45.7.0esr-3","45.7.0esr-4","45.8.0esr-1","45.8.0esr-1~deb7u1","45.8.0esr-1~deb8u1","45.9.0esr-1","45.9.0esr-1~deb7u1","45.9.0esr-1~deb8u1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1","52.2.0esr-1","52.2.0esr-1~deb7u1","52.2.0esr-1~deb8u1","52.2.0esr-1~deb9u1","52.2.0esr-2","52.3.0esr-1","52.3.0esr-1~deb7u1","52.3.0esr-1~deb8u1","52.3.0esr-1~deb8u2","52.3.0esr-1~deb9u1","52.3.0esr-2","52.4.0esr-1~deb8u1","52.4.0esr-1~deb9u1","52.4.0esr-2","52.4.0esr-2~deb7u1","52.5.0esr-1","52.5.0esr-1~deb7u1","52.5.0esr-1~deb8u1","52.5.0esr-1~deb9u1","52.5.2esr-1","52.5.2esr-1~deb7u1","52.5.2esr-1~deb8u1","52.5.2esr-1~deb9u1","52.5.3esr-1","52.6.0esr-1","52.6.0esr-1~deb7u1","52.6.0esr-1~deb8u1","52.6.0esr-1~deb9u1","52.6.0esr-2","52.6.0esr-2+alpha.1","52.6.0esr-2+alpha.2","52.7.0esr-1","52.7.0esr-1~deb8u1","52.7.0esr-1~deb9u1","52.7.1esr-1~deb7u1"],"bundled":7},{"source":"osv","ecosystem":"Debian:9","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.1esr-1~deb9u1"}]}],"versions":["45.9.0esr-1","52.0.1esr-1","52.0.2esr-1","52.0esr-1","52.1.0esr-1","52.2.0esr-1","52.2.0esr-1~deb7u1","52.2.0esr-1~deb8u1","52.2.0esr-1~deb9u1","52.2.0esr-2","52.3.0esr-1","52.3.0esr-1~deb7u1","52.3.0esr-1~deb8u1","52.3.0esr-1~deb8u2","52.3.0esr-1~deb9u1","52.3.0esr-2","52.4.0esr-1~deb8u1","52.4.0esr-1~deb9u1","52.4.0esr-2","52.4.0esr-2~deb7u1","52.5.0esr-1","52.5.0esr-1~deb7u1","52.5.0esr-1~deb8u1","52.5.0esr-1~deb9u1","52.5.2esr-1","52.5.2esr-1~deb7u1","52.5.2esr-1~deb8u1","52.5.2esr-1~deb9u1","52.5.3esr-1","52.6.0esr-1","52.6.0esr-1~deb7u1","52.6.0esr-1~deb8u1","52.6.0esr-1~deb9u1","52.6.0esr-2","52.6.0esr-2+alpha.1","52.6.0esr-2+alpha.2","52.7.0esr-1","52.7.0esr-1~deb8u1","52.7.0esr-1~deb9u1","52.7.1esr-1~deb7u1","52.7.1esr-1~deb8u1"],"bundled":7},{"source":"osv","ecosystem":"Debian:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.7.0-1~deb8u1"}]}],"versions":["1.5-4","1.5.0.2-1","1.5.0.2-2","1.5.0.2-3","1.5.0.4-1","1.5.0.4-2","1.5.0.4-3","1.5.0.5-1","1.5.0.7-1","1.5.0.7-2","1:52.4.0-1","1:52.4.0-1~deb7u1","1:52.4.0-1~deb8u1","1:52.4.0-1~deb9u1","1:52.4.0-2~exp1","1:52.5.0-1","1:52.5.0-1~deb7u1","1:52.5.0-1~deb8u1","1:52.5.0-1~deb9u1","1:52.5.2-1","1:52.5.2-1~deb7u1","1:52.5.2-2","1:52.5.2-2~deb8u1","1:52.5.2-2~deb9u1","1:52.6.0-1","1:52.6.0-1+alpha.1","1:52.6.0-1+alpha.2","1:52.6.0-1~deb7u1","1:52.6.0-1~deb8u1","1:52.6.0-1~deb9u1","1:52.7.0-1~deb7u1"],"bundled":6},{"source":"osv","ecosystem":"Debian:9","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.7.0-1~deb9u1"}]}],"versions":["1.5-4","1.5.0.2-1","1.5.0.2-2","1.5.0.2-3","1.5.0.4-1","1.5.0.4-2","1.5.0.4-3","1.5.0.5-1","1.5.0.7-1","1.5.0.7-2","1:52.4.0-1","1:52.4.0-1~deb7u1","1:52.4.0-1~deb8u1","1:52.4.0-1~deb9u1","1:52.4.0-2~exp1","1:52.5.0-1","1:52.5.0-1~deb7u1","1:52.5.0-1~deb8u1","1:52.5.0-1~deb9u1","1:52.5.2-1","1:52.5.2-1~deb7u1","1:52.5.2-2","1:52.5.2-2~deb8u1","1:52.5.2-2~deb9u1","1:52.6.0-1","1:52.6.0-1+alpha.1","1:52.6.0-1+alpha.2","1:52.6.0-1~deb7u1","1:52.6.0-1~deb8u1","1:52.6.0-1~deb9u1","1:52.7.0-1~deb7u1","1:52.7.0-1~deb8u1"],"bundled":6},{"source":"osv","ecosystem":"Mageia:6","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3-2.mga6"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:6","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3-1.mga6"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:6","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19-1.mga6"}]}],"bundled":8},{"source":"osv","ecosystem":"Mageia:6","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.0-1.mga6"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:6","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.0-1.mga6"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.0-1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:5","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.0-1.mga5"}]}],"bundled":6},{"source":"osv","ecosystem":"Mageia:6","package":"iceape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.49.3-1.mga6"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el6_9"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.7.0-1.el7_4"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-109.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-109.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-109.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-109.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-109.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-109.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-109.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-109.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-109.25.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-72.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-72.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-72.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-72.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-72.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7.3esr-72.27.2"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.7.0+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1","1:52.1.1+build1-0ubuntu0.14.04.1","1:52.2.1+build1-0ubuntu0.14.04.1","1:52.3.0+build1-0ubuntu0.14.04.1","1:52.4.0+build1-0ubuntu0.14.04.2","1:52.5.0+build1-0ubuntu0.14.04.1","1:52.6.0+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.7.0+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1","1:52.2.1+build1-0ubuntu0.16.04.1","1:52.3.0+build1-0ubuntu0.16.04.1","1:52.4.0+build1-0ubuntu0.16.04.2","1:52.5.0+build1-0ubuntu0.16.04.1","1:52.6.0+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.7.0+build1-0ubuntu1"}]}],"versions":["1:52.4.0+build1-0ubuntu2","1:52.6.0+build1-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.7.0+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1","1:52.1.1+build1-0ubuntu0.14.04.1","1:52.2.1+build1-0ubuntu0.14.04.1","1:52.3.0+build1-0ubuntu0.14.04.1","1:52.4.0+build1-0ubuntu0.14.04.2","1:52.5.0+build1-0ubuntu0.14.04.1","1:52.6.0+build1-0ubuntu0.14.04.1"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.7.0+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1","1:52.1.1+build1-0ubuntu0.16.04.1","1:52.2.1+build1-0ubuntu0.16.04.1","1:52.3.0+build1-0ubuntu0.16.04.1","1:52.4.0+build1-0ubuntu0.16.04.2","1:52.5.0+build1-0ubuntu0.16.04.1","1:52.6.0+build1-0ubuntu0.16.04.1"],"bundled":6},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7-57.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.7-57.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"MozillaThunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"91.1.1-1.1"}]}],"bundled":394}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"firefox esr"},{"vendor":"mozilla","product":"thunderbird"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://www.debian.org/security/2018/dsa-4139","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201810-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201811-13","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0527","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://usn.ubuntu.com/3545-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-09/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-07/","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0526","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4155","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0648","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0647","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1440926","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Permissions Required","report"]},{"url":"http://www.securitytracker.com/id/1040514","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securityfocus.com/bid/103384","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5144","tags":["advisory"]},{"url":"https://usn.ubuntu.com/3545-1"},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-07"},{"url":"https://www.mozilla.org/security/advisories/mfsa2018-09"},{"url":"https://github.com/advisories/GHSA-4xfj-vf8f-vwpp"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-5144","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0202.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22776","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/","tags":["advisory","article","report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-10/","tags":["advisory"]},{"url":"https://www.mozilla.org/security/known-vulnerabilities/firefox-esr/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2018-0203.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22823","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-09/","tags":["advisory","article"]},{"url":"https://advisories.mageia.org/MGASA-2018-0207.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22903","tags":["report"]},{"url":"https://advisories.mageia.org/MGASA-2018-0338.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23100","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-01/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-03/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-12/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-14/","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1555127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1555128","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1555129","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1555130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1555131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1555132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1555133","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0526.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5125","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5125","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5125","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5125","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5127","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5127","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5127","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5129","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5129","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5130","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5130","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5131","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5131","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5131","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5144","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5144","tags":["advisory","report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5144","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5145","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/#CVE-2018-5145","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0527.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1557221","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0647.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-5146","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-5146","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5146","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2018-08","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0648.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180850-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1085130","tags":["report"]},{"url":"https://bugzilla.suse.com/1085671","tags":["report"]},{"url":"https://bugzilla.suse.com/1087059","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5131","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5148","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180907-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-5144","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3545-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-5125","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5127","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5129","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5145","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5146","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3285","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3656","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1236","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4058","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4067","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9897","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9899","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9900","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5399","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5400","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5404","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5407","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5413","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5414","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5422","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7803","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7823","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7845","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7848","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12364","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12365","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12367","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12371","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12389","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12390","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18335","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5089","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5095","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5096","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5102","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5117","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5159","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5161","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5168","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5170","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5174","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5184","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11691","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11692","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11693","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11698","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11703","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11708","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11709","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11712","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11715","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11717","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13722","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15903","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17005","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17008","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17016","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17017","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17021","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17026","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5785","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9818","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12395","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12397","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12406","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12410","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12417","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15673","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15676","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15683","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16044","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26951","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26958","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-26978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6820","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6821","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6822","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6825","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23953","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23960","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23968","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23973","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23993","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23994","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29945","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29946","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29957","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29980","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29989","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-29991","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-30547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-38495","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-5144","description":"An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR \u003c 52.7 and Thunderbird \u003c 52.7.","status":"published","published":"2018-06-11T21:00:00Z","modified":"2024-08-05T05:26:46.979Z","updated_at":"2026-11-02T14:35:01.28843Z"}],"euvd":[{"id":"EUVD-2018-16930","description":"An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR \u003c 52.7 and Thunderbird \u003c 52.7.","status":"published","published":"2018-06-11T21:00:00Z","modified":"2024-08-05T05:26:46Z","updated_at":"2026-11-03T02:40:11.729267Z"}],"ghsa":[{"id":"GHSA-4xfj-vf8f-vwpp","title":"An integer overflow can occur during conversion of text to some Unicode character sets due to an...","description":"An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR \u003c 52.7 and Thunderbird \u003c 52.7.","status":"published","published":"2022-05-14T01:27:14Z","modified":"2025-11-25T18:33:21Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:04:56.973775Z"}],"nvd":[{"id":"CVE-2018-5144","description":"An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR \u003c 52.7 and Thunderbird \u003c 52.7.","status":"published","published":"2018-06-11T21:29:14.687Z","modified":"2026-06-17T01:59:42.21Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:04:29.837913Z"}],"osv":[{"id":"CVE-2018-5144","description":"An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR \u003c 52.7 and Thunderbird \u003c 52.7.","status":"published","published":"2018-06-11T21:29:14.687Z","modified":"2026-04-16T06:21:46.938929917Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:44:09.442568Z"},{"id":"DEBIAN-CVE-2018-5144","description":"An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR \u003c 52.7 and Thunderbird \u003c 52.7.","status":"published","published":"2018-06-11T21:29:14.687Z","modified":"2026-10-23T18:04:48.234450242Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"RHSA-2018:0526","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T01:02:57Z","modified":"2026-06-26T10:36:46Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0527","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T01:03:04Z","modified":"2026-06-26T10:36:46Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0647","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T01:03:23Z","modified":"2026-06-26T10:36:48Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:0648","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T01:03:17Z","modified":"2026-06-26T10:36:49Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2018-5144","description":"An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR \u003c 52.7 and Thunderbird \u003c 52.7.","status":"published","published":"2018-03-15T00:00:00Z","modified":"2026-04-22T11:56:57.696901Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:54:18.33562Z"},{"id":"DLA-1308-1","title":"firefox-esr - security update","status":"published","published":"2018-03-15T00:00:00Z","modified":"2026-03-09T01:01:17.959819Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1327-1","title":"thunderbird - security update","status":"published","published":"2018-03-29T00:00:00Z","modified":"2026-03-09T01:01:58.995656Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4139-1","title":"firefox-esr - security-update","status":"published","published":"2018-03-15T00:00:00Z","modified":"2026-03-09T01:22:26.724195Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-4155-1","title":"thunderbird - security update","status":"published","published":"2018-03-28T00:00:00Z","modified":"2026-03-09T02:08:58.727891Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0202","title":"Updated firefox packages fix security vulnerability","description":"Memory safety bugs fixed in Firefox ESR 52.7 (CVE-2018-5125).\n\nBuffer overflow manipulating SVG animatedPathSegList (CVE-2018-5127).\n\nOut-of-bounds write with malformed IPC messages (CVE-2018-5129).\n\nMismatched RTP payload type can trigger memory corruption (CVE-2018-5130).\n\nFetch API improperly returns cached copies of no-store/no-cache resources\n(CVE-2018-5131).\n\nInteger overflow during Unicode conversion (CVE-2018-5144).\n\nMemory safety bugs fixed in Firefox ESR 52.7 (CVE-2018-5145).\n\nA use-after-free vulnerability can occur in the compositor during certain\ngraphics operations when a raw pointer is used instead of a reference counted\none. This results in a potentially exploitable crash (CVE-2018-5148).\n","status":"published","published":"2018-04-15T13:33:47Z","modified":"2026-04-16T06:22:46.797227723Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0203","title":"Updated thunderbird packages fix security vulnerability","description":"* A buffer overflow can occur when manipulating the SVG animatedPathSegList\nthrough script. This results in a potentially exploitable crash\n(CVE-2018-5127).\n* A lack of parameter validation on IPC messages results in a potential\nout-of-bounds write through malformed IPC messages. This can potentially\nallow for sandbox escape through memory corruption in the parent process\n(CVE-2018-5129).\n* An integer overflow can occur during conversion of text to some Unicode\ncharacter sets due to an unchecked length parameter (CVE-2018-5144).\n* An out of bounds memory write while processing Vorbis audio data was\nreported through the Pwn2Own contest (CVE-2018-5146).\n* Mozilla developers and community members reported memory safety bugs\npresent in Firefox 58, Firefox ESR 52.6, and Thunderbird 52.6. Some of\nthese bugs showed evidence of memory corruption and we presume that with\nenough effort that some of these could be exploited to run arbitrary code\n(CVE-2018-5125).\n* Mozilla developers reported memory safety bugs present in Firefox ESR 52.6\nand Thunderbird 52.6. These bugs showed evidence of memory corruption and we\npresume that with enough effort that some of these could be exploited to run\narbitrary code (CVE-2018-5145).\n","status":"published","published":"2018-04-15T13:33:47Z","modified":"2026-04-16T06:24:17.624588958Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0207","title":"Updated thunderbird packages fix bugs and security vulnerabilities","description":"* A buffer overflow can occur when manipulating the SVG\nanimatedPathSegList through script. This results in a potentially\nexploitable crash (CVE-2018-5127).\n* A lack of parameter validation on IPC messages results in a potential\nout-of-bounds write through malformed IPC messages. This can potentially\nallow for sandbox escape through memory corruption in the parent process\n(CVE-2018-5129).\n* An integer overflow can occur during conversion of text to some\nUnicode character sets due to an unchecked length parameter\n(CVE-2018-5144).\n* An out of bounds memory write while processing Vorbis audio data was\nreported through the Pwn2Own contest (CVE-2018-5146).\n* Mozilla developers and community members reported memory safety bugs\npresent in Firefox 58, Firefox ESR 52.6, and Thunderbird 52.6. Some of\nthese bugs showed evidence of memory corruption and we presume that with\nenough effort that some of these could be exploited to run arbitrary\ncode (CVE-2018-5125).\n* Mozilla developers reported memory safety bugs present in Firefox\nESR 52.6 and Thunderbird 52.6. These bugs showed evidence of memory\ncorruption and we presume that with enough effort that some of these\ncould be exploited to run arbitrary code (CVE-2018-5145).\n","status":"published","published":"2018-04-20T17:24:13Z","modified":"2026-04-16T06:22:27.890701656Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0338","title":"Updated iceaepe packages fix security vulnerability","description":"Updated iceape packages include security fixes from upstream Seamonkey\nand Firefox:\n\nMultiple flaws were found in the way Iceape 2.49.1 processes various types\nof web content, where loading a web page containing malicious content could\ncause Iceape to crash, execute arbitrary code, or disclose sensitive\ninformation (CVE-2018-5089, CVE-2018-5091, CVE-2018-5095, CVE-2018-5096,\nCVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5102, CVE-2018-5103,\nCVE-2018-5104, CVE-2018-5117, CVE-2018-5125, CVE-2018-5127, CVE-2018-5129,\nCVE-2018-5130, CVE-2018-5131, CVE-2018-5144, CVE-2018-5145, CVE-2018-5148,\nCVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5157, CVE-2018-5158,\nCVE-2018-5159, CVE-2018-5168, CVE-2018-5178, CVE-2018-5183, CVE-2018-6126)\n","status":"published","published":"2018-08-15T15:45:26Z","modified":"2026-04-16T06:23:51.688419512Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2018:0818-1","title":"Security update for Mozilla Thunderbird","description":"This update for Mozilla Thunderbird to version 52.7 fixes multiple issues.\n    \nThe following bugs were fixed:\n    \n- Searching message bodies of messages in local folders, including filter\n  and quick filter operations, did not find content in message attachments\n- Better error handling for Yahoo accounts\n    \nThe following security fixes are included as part of the mozilla platform. \nIn general, these flaws cannot be exploited through email in Thunderbird\nbecause scripting is disabled when reading mail, but are potentially risks\nin browser or browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):\n\n- CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList\n- CVE-2018-5129: Out-of-bounds write with malformed IPC messages\n- CVE-2018-5144: Integer overflow during Unicode conversion\n- CVE-2018-5146: Out of bounds memory write in libvorbis\n- CVE-2018-5125: Memory safety bugs fixed in Thunderbird 52.7\n- CVE-2018-5145: Memory safety bugs fixed in Thunderbird 52.7\n","status":"published","published":"2018-03-26T11:29:18Z","modified":"2026-02-04T02:50:40.62028Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2018:0819-1","title":"Security update for Mozilla Thunderbird","description":"This update for Mozilla Thunderbird to version 52.7 fixes multiple issues.\n    \nThe following bugs were fixed:\n    \n- Searching message bodies of messages in local folders, including filter\n  and quick filter operations, did not find content in message attachments\n- Better error handling for Yahoo accounts\n    \nThe following security fixes are included as part of the mozilla platform. \nIn general, these flaws cannot be exploited through email in Thunderbird\nbecause scripting is disabled when reading mail, but are potentially risks\nin browser or browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):\n\n- CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList\n- CVE-2018-5129: Out-of-bounds write with malformed IPC messages\n- CVE-2018-5144: Integer overflow during Unicode conversion\n- CVE-2018-5146: Out of bounds memory write in libvorbis\n- CVE-2018-5125: Memory safety bugs fixed in Thunderbird 52.7\n- CVE-2018-5145: Memory safety bugs fixed in Thunderbird 52.7\n","status":"published","published":"2018-03-26T11:29:18Z","modified":"2026-02-04T04:32:31.066177Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:10601-1","title":"MozillaThunderbird-91.1.1-1.1 on GA media","description":"These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:23.188336Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:0850-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nSecurity issues fixed in Firefox ESR 52.7.3 (bsc#1085130):\n\n- CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7\n- CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList\n- CVE-2018-5129: Out-of-bounds write with malformed IPC messages\n- CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption\n- CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources\n- CVE-2018-5144: Integer overflow during Unicode conversion\n- CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7\n- CVE-2018-5146: Out of bounds memory write in libvorbis (bsc#1085671)\n- CVE-2018-5147: Out of bounds memory write in libtremor (bsc#1085671)\n- CVE-2018-5148: Use-after-free in compositor (MFSA 2018-10) (bsc#1087059)\n\n","status":"published","published":"2018-03-29T13:28:21Z","modified":"2026-02-04T02:29:09.739601Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0907-1","title":"Security update for MozillaFirefox","description":"This update for MozillaFirefox fixes the following issues:\n\nSecurity issues fixed in Firefox ESR 52.7.3 (bsc#1085130):\n\n- CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7\n- CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList\n- CVE-2018-5129: Out-of-bounds write with malformed IPC messages\n- CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption\n- CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources\n- CVE-2018-5144: Integer overflow during Unicode conversion\n- CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7\n- CVE-2018-5146: Out of bounds memory write in libvorbis (bsc#1085671)\n- CVE-2018-5147: Out of bounds memory write in libtremor (bsc#1085671)\n- CVE-2018-5148: Use-after-free in compositor (MFSA 2018-10) (bsc#1087059)\n\n","status":"published","published":"2018-04-10T08:27:08Z","modified":"2026-02-04T02:50:53.967947Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3545-1","title":"thunderbird vulnerabilities","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted website in a browsing context,\nan attacker could potentially exploit these to cause a denial of service,\nor execute arbitrary code. (CVE-2018-5125, CVE-2018-5127, CVE-2018-5129,\nCVE-2018-5144, CVE-2018-5145, CVE-2018-5146)\n","status":"published","published":"2018-03-29T13:14:32Z","modified":"2026-04-22T09:43:31.089049Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}