9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.028 Low
EPSS
Percentile
90.4%
10/09/2017
Critical
Multiple serious vulnerabilities have been found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, perform cross-site scripting and execute arbitrary code.
Mozilla Thunderbird versions earlier than 52.4
Update to the latest version
Download Mozilla Thunderbird
Mozilla Foundation Security Advisory 2017-23
ACE
CVE-2017-77937.5Critical
CVE-2017-78187.5Critical
CVE-2017-78197.5Critical
CVE-2017-78247.5Critical
CVE-2017-78055.0Warning
CVE-2017-78146.8High
CVE-2017-78255.0Warning
CVE-2017-78234.3Warning
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7793
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7805
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7814
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7818
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7819
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7823
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7824
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7825
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Mozilla-Thunderbird/
www.mozilla.org/en-US/security/advisories/mfsa2017-23/
www.mozilla.org/en-US/thunderbird/
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.028 Low
EPSS
Percentile
90.4%