Lucene search
Https://packages.altlinux.org/en/sisyphus/security/647E8FB4B3631A2FE9DFFE4E8B1244ACHistorySep 29, 2017 - 12:00 a.m.
Security fix for the ALT Linux 10 package firefox-esr version 52.4.0-alt1
2017-09-2900:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
3
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.021 Low
EPSS
Percentile
87.4%
Sept. 29, 2017 Andrey Cherepanov 52.4.0-alt1
- New ESR version (52.4.0)
- Fixes:
+ CVE-2017-7793 Use-after-free with Fetch API
+ CVE-2017-7818 Use-after-free during ARIA array manipulation
+ CVE-2017-7819 Use-after-free while resizing images in design mode
+ CVE-2017-7824 Buffer overflow when drawing and validating elements with ANGLE
+ CVE-2017-7805 Use-after-free in TLS 1.2 generating handshake hashes
+ CVE-2017-7814 Blob and data URLs bypass phishing and malware protection warnings
+ CVE-2017-7825 OS X fonts render some Tibetan and Arabic unicode characters as spaces
+ CVE-2017-7823 CSP sandbox directive did not create a unique origin
+ CVE-2017-7810 Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4
Related
suse
suse
Security update for MozillaFirefox, mozilla-nss (important)
2017-11-13 21:08:19
Security update for MozillaThunderbird (important)
2017-10-12 00:13:55
Security update for MozillaFirefox, mozilla-nss (important)
2017-10-10 15:09:53
nessus
nessus
Debian DLA-1153-1 : icedove/thunderbird security update
2017-11-02 00:00:00
openSUSE Security Update : MozillaThunderbird (openSUSE-2017-1144)
2017-10-12 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:2872-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-3436-1)
2017-10-12 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 52.4 — Mozilla
2017-10-09 00:00:00
Security vulnerabilities fixed in Firefox ESR 52.4 — Mozilla
2017-09-28 00:00:00
Security vulnerabilities fixed in Firefox 56 — Mozilla
2017-09-28 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerabilities
2017-10-05 23:37:56
Updated iceape packages fix security vulnerabilities
2018-01-02 14:48:29
osv
osv
firefox-esr - security update
2017-09-30 00:00:00
thunderbird - security update
2017-11-01 00:00:00
thunderbird - security update
2017-10-31 00:00:00
debian
debian
[SECURITY] [DSA 3987-1] firefox-esr security update
2017-09-29 21:51:54
[SECURITY] [DLA 1118-1] firefox-esr security update
2017-09-30 16:57:14
[SECURITY] [DSA 4014-1] thunderbird security update
2017-11-01 22:19:49
archlinux
archlinux
[ASA-201710-19] thunderbird: multiple issues
2017-10-12 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 52.4.0-alt1
2017-10-07 00:00:00
redhat
redhat
(RHSA-2017:2885) Important: thunderbird security update
2017-10-11 22:55:46
(RHSA-2017:2831) Critical: firefox security update
2017-09-28 18:56:55
(RHSA-2017:2832) Important: nss security update
2017-09-28 19:01:49
centos
centos
firefox security update
2017-09-29 19:44:59
thunderbird security update
2017-10-12 12:12:05
nss security update
2017-09-29 19:42:08
oraclelinux
oraclelinux
firefox security update
2017-09-29 00:00:00
thunderbird security update
2017-10-12 00:00:00
nss security update
2017-09-28 00:00:00
kaspersky
kaspersky
KLA11116 Multiple vulnerabilities in Mozilla Thunderbird
2017-10-09 00:00:00
KLA11109 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
2017-09-28 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2017-10-11 00:00:00
Firefox vulnerabilities
2017-10-02 00:00:00
Firefox regression
2017-10-04 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2017-09-28 00:00:00
nss -- Use-after-free in TLS 1.2 generating handshake hashes
2017-08-04 00:00:00
redhatcve
redhatcve
prion
prion
Design/Logic Flaw
2018-06-11 21:29:00
Design/Logic Flaw
2018-06-11 21:29:00
Design/Logic Flaw
2018-06-11 21:29:00
ubuntucve
ubuntucve
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:37:15
Denial Of Service (DoS)
2019-05-02 06:37:15
Arbitrary Code Execution
2019-01-15 09:19:06
cve
cve
debiancve
debiancve
ibm
ibm
amazon
amazon
Important: nss
2017-10-12 19:41:00
f5
f5
K58192514 : NSS vulnerability CVE-2017-7805
2017-11-02 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2018-03-28 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2018-02-20 00:00:00
oracle
oracle
Oracle Critical Patch Update - April 2018
2018-04-17 00:00:00
Oracle Critical Patch Update - October 2018
2018-12-18 00:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.021 Low
EPSS
Percentile
87.4%
Related for 647E8FB4B3631A2FE9DFFE4E8B1244AC