CVE-2017-7846

2018-06-1121:29:00

Debian Security Bug Tracker

security-tracker.debian.org

0.007 Low

EPSS

Percentile

80.3%

JSON

It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via “View -> Feed article -> Website” or in the standard format of “View -> Feed article -> default format”. This vulnerability affects Thunderbird < 52.5.2.

OSVersionArchitecturePackageVersionFilename
Debian12allthunderbird< 1:52.5.2-1thunderbird_1:52.5.2-1_all.deb
Debian11allthunderbird< 1:52.5.2-1thunderbird_1:52.5.2-1_all.deb
Debian10allthunderbird< 1:52.5.2-1thunderbird_1:52.5.2-1_all.deb
Debian999allthunderbird< 1:52.5.2-1thunderbird_1:52.5.2-1_all.deb
Debian13allthunderbird< 1:52.5.2-1thunderbird_1:52.5.2-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	thunderbird	< 1:52.5.2-1	thunderbird_1:52.5.2-1_all.deb
Debian	11	all	thunderbird	< 1:52.5.2-1	thunderbird_1:52.5.2-1_all.deb
Debian	10	all	thunderbird	< 1:52.5.2-1	thunderbird_1:52.5.2-1_all.deb
Debian	999	all	thunderbird	< 1:52.5.2-1	thunderbird_1:52.5.2-1_all.deb
Debian	13	all	thunderbird	< 1:52.5.2-1	thunderbird_1:52.5.2-1_all.deb