thunderbird vulnerabilities (Mageia)
1,570 vulnerabilities.
thunderbirdMageiaAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...8.8 HighthunderbirdMageiaIn the previous mitigations for Spectre, the resolution or precision of various methods was...4.3 MediumthunderbirdMageiaAn invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds...6.5 MediumthunderbirdMageiaA compromised IPC child process can escape the content sandbox and list the names of arbitrary...6.5 MediumthunderbirdMageiaNPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by...8.8 HighthunderbirdMageiaA use-after-free vulnerability can occur when script uses mutation events to move DOM nodes...8.8 HighthunderbirdMageiaAn integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD...8.8 HighthunderbirdMageiaAn integer overflow can occur in the SwizzleData code while calculating buffer sizes. The...8.8 HighthunderbirdMageiaA use-after-free vulnerability can occur when deleting an input element during a mutation event...8.8 HighthunderbirdMageiaA buffer overflow can occur when rendering canvas content while adjusting the height and width of...8.8 HighthunderbirdMageiaThe signature verification routine in Enigmail before 2.0.7 interprets user ids as status/control...7.5 HighthunderbirdMageiamainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and...7.5 HighthunderbirdMageiaPlaintext of decrypted emails can leak through by user submitting an embedded form. This...6.5 MediumthunderbirdMageiaUsing remote content in encrypted messages can lead to the disclosure of plaintext. This...7.5 HighthunderbirdMageiaIt is possible to spoof the filename of an attachment and display an arbitrary attachment name....4.3 MediumthunderbirdMageiaPlaintext of decrypted emails can leak through the src attribute of remote images, or links. This...7.5 HighthunderbirdMageiaCrafted message headers can cause a Thunderbird process to hang on receiving the message. This...4.3 MediumthunderbirdMageiaMozilla developers backported selected changes in the Skia library. These changes correct memory...9.8 CriticalthunderbirdMageiaA buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with...8.1 HighthunderbirdMageiaSites can bypass security checks on permissions to install lightweight themes by manipulating the...5.3 MediumthunderbirdMageiaAn integer overflow can occur in the Skia library due to 32-bit integer use in an array without...9.8 CriticalthunderbirdMageiaA use-after-free vulnerability can occur while adjusting layout during SVG animations with text...9.8 CriticalthunderbirdMageiaA use-after-free vulnerability can occur while enumerating attributes during SVG animations with...9.8 CriticalthunderbirdMageiaMemory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7. Some of...9.8 CriticalthunderbirdMageiaAn out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own...8.8 HighthunderbirdMageiaMemory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory...9.8 CriticalthunderbirdMageiaAn integer overflow can occur during conversion of text to some Unicode character sets due to an...7.3 HighthunderbirdMageiaA lack of parameter validation on IPC messages results in a potential out-of-bounds write through...8.6 HighthunderbirdMageiaA buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This...8.8 HighthunderbirdMageiaMemory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed...8.8 HighthunderbirdMageiaA use-after-free vulnerability can occur while editing events in form elements on a page,...9.8 CriticalthunderbirdMageiaIf right-to-left text is used in the addressbar with left-to-right alignment, it is possible in...5.3 MediumthunderbirdMageiaA use-after-free vulnerability can occur during font face manipulation when a font face is freed...9.8 CriticalthunderbirdMageiaA use-after-free vulnerability can occur during mouse event handling due to issues with...9.8 CriticalthunderbirdMageiaA use-after-free vulnerability can occur when manipulating HTML media elements with media streams...9.8 CriticalthunderbirdMageiaA use-after-free vulnerability can occur when the widget listener is holding strong references to...9.8 CriticalthunderbirdMageiaA use-after-free vulnerability can occur when form input elements, focus, and selections are...9.8 CriticalthunderbirdMageiaA use-after-free vulnerability can occur during XSL transformations when the source document for...9.8 CriticalthunderbirdMageiaAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 CriticalthunderbirdMageiaMemory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed...9.8 CriticalthunderbirdMageiaRSS fields can inject new lines into the created email structure, modifying the message body....5.3 MediumthunderbirdMageiaCrafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name....4.3 MediumthunderbirdMageiaIt is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website,...8.8 HighthunderbirdMageiaIt is possible to spoof the sender's email address and display an arbitrary sender address to the...5.3 MediumthunderbirdMageiaAn issue was discovered in Enigmail before 1.9.9. In a variant of CVE-2017-17847, signature...7.5 HighthunderbirdMageiaAn issue was discovered in Enigmail before 1.9.9. Signature spoofing is possible because the UI...7.5 HighthunderbirdMageiaAn issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial...7.5 HighthunderbirdMageiaAn issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs...7.3 HighthunderbirdMageiaAn issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content...6.5 MediumthunderbirdMageiaAn issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of...5.9 Medium- Show moreLoading…