thunderbird-l10n vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbird-l10nMageiaMemory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these...9.8 Criticalthunderbird-l10nMageiaMemory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence...9.8 Criticalthunderbird-l10nMageiaA vulnerability can occur when capturing a media stream when the media source type is changed as...9.8 Criticalthunderbird-l10nMageiaAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...8.8 Highthunderbird-l10nMageiaIn the previous mitigations for Spectre, the resolution or precision of various methods was...4.3 Mediumthunderbird-l10nMageiaAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 Mediumthunderbird-l10nMageiaA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 Mediumthunderbird-l10nMageiaNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 Highthunderbird-l10nMageiaA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 Highthunderbird-l10nMageiaAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 Highthunderbird-l10nMageiaAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...8.8 Highthunderbird-l10nMageiaA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 Highthunderbird-l10nMageiaA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 Highthunderbird-l10nMageiaThe signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control...7.5 Highthunderbird-l10nMageiamainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and...7.5 Highthunderbird-l10nMageiaPlaintext of decrypted emails can leak through by user submitting an embedded form. This...6.5 Mediumthunderbird-l10nMageiaUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...7.5 Highthunderbird-l10nMageiaIt is possible to spoof the filename of an attachment and display an arbitrary attachment name....4.3 Mediumthunderbird-l10nMageiaPlaintext of decrypted emails can leak through the src attribute of remote images, or links. This...7.5 Highthunderbird-l10nMageiaCrafted message headers can cause a Thunderbird process to hang on receiving the message. This...4.3 Mediumthunderbird-l10nMageiaMozilla developers backported selected changes in the Skia library. These changes correct memory...9.8 Criticalthunderbird-l10nMageiaA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...8.1 Highthunderbird-l10nMageiaSites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 Mediumthunderbird-l10nMageiaAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 Criticalthunderbird-l10nMageiaA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 Criticalthunderbird-l10nMageiaA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 Criticalthunderbird-l10nMageiaMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 Criticalthunderbird-l10nMageiaAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 Highthunderbird-l10nMageiaMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...9.8 Criticalthunderbird-l10nMageiaAn integer overflow can occur during conversion of text to some Unicode character sets due to an...7.3 Highthunderbird-l10nMageiaA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...8.6 Highthunderbird-l10nMageiaA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...8.8 Highthunderbird-l10nMageiaMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...8.8 Highthunderbird-l10nMageiaA use-after-free vulnerability can occur while editing events in form elements on a page,...9.8 Criticalthunderbird-l10nMageiaIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 Mediumthunderbird-l10nMageiaA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 Criticalthunderbird-l10nMageiaA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 Criticalthunderbird-l10nMageiaA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 Criticalthunderbird-l10nMageiaA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 Criticalthunderbird-l10nMageiaA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 Criticalthunderbird-l10nMageiaA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 Criticalthunderbird-l10nMageiaAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 Criticalthunderbird-l10nMageiaMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 Criticalthunderbird-l10nMageiaRSS fields can inject new lines into the created email structure, modifying the message body....5.3 Mediumthunderbird-l10nMageiaCrafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name....4.3 Mediumthunderbird-l10nMageiaIt is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website,...8.8 Highthunderbird-l10nMageiaIt is possible to spoof the sender's email address and display an arbitrary sender address to the...5.3 Mediumthunderbird-l10nMageiaAn issue was discovered in Enigmail before 1.9.9. In a variant of CVE-2017-17847, signature...7.5 Highthunderbird-l10nMageiaAn issue was discovered in Enigmail before 1.9.9. Signature spoofing is possible because the UI...7.5 Highthunderbird-l10nMageiaAn issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial...7.5 High- Show moreLoading…