Lucene search
+L

14 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 4:22 a.m.•9 views

SUSE CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

8.8CVSS9.3AI score0.12658EPSS
SaveExploits1References20
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•48 views

NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0093)

The remote NewStart CGSL host, running version MAIN 4.06, has thunderbird packages installed that are affected by multiple vulnerabilities: - libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file. CVE-2016-5824 - A use-after-free vulnerability can...

10CVSS8AI score0.12658EPSS
SaveExploits1References11
osv_mgasa
osv_mgasa
•added 2019/02/13 11:08 a.m.•17 views

MGASA-2019-0069 Updated thunderbird packages fix security vulnerability

Use-after-free parsing HTML5 stream. CVE-2018-18500 Privilege escalation through IPC channel messages. CVE-2018-18505 Memory safety bugs fixed in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. CVE-2018-18501...

10CVSS10AI score0.12658EPSS
SaveExploits1References4
osv_suse
osv_suse
•added 2019/02/12 2:59 p.m.•12 views

SUSE-SU-2019:0338-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 60.5 fixes the following issues: Security vulnerabilities addressed MSFA 2019-03 MSFA 2018-31 bsc1122983 bsc1119105: CVE-2018-18500: Use-after-free parsing HTML5 stream CVE-2018-18505: Privilege escalation through IPC channel messages CVE-2016-5824 Do...

10CVSS9.4AI score0.12658EPSS
SaveExploits1References13
osv_debian
osv_debian
•added 2019/02/05 9:29 p.m.•8 views

DEBIAN-CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS9.2AI score0.12658EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2019/02/05 9:29 p.m.•17 views

CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS9.2AI score
SaveExploits0References17
Mend
Mend
•added 2019/02/05 9:00 p.m.•5 views

CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS0.12658EPSS
SaveExploits1References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/05 12:00 a.m.•7 views

CVE-2018-18500: Use After Free

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS8.3AI score0.12658EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
•added 2019/02/04 8:45 p.m.•14 views

Mozilla: Use-after-free parsing HTML5 stream

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS7.3AI score0.12658EPSS
SaveExploits1References5
OpenVAS
OpenVAS
•added 2019/01/30 12:00 a.m.•41 views

Mozilla Firefox ESR Security Advisories (MFSA2018-31, MFSA2019-03) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

10CVSS10AI score0.12658EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2019/01/30 12:00 a.m.•13 views

UBUNTU-CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS7.3AI score0.12658EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2019/01/30 12:00 a.m.•44 views

CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS7.2AI score0.12658EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2019/01/29 12:00 a.m.•3 views

PT-2019-1438

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 65 Firefox ESR versions prior to 60.5 Thunderbird versions prior to 60.5 Description The issue is related to a use-after-free vulnerability that can occur while parsing an HTML5 stream with custom HTML elements. This...

9.8CVSS0.12658EPSS
SaveExploits1
FreeBSD
FreeBSD
•added 2019/01/29 12:00 a.m.•73 views

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: CVE-2018-18500: Use-after-free parsing HTML5 stream CVE-2018-18503: Memory corruption with Audio Buffer CVE-2018-18504: Memory corruption and out-of-bounds read of texture client buffer CVE-2018-18505: Privilege escalation through IPC channel messages CVE-2018-18506:...

10CVSS2.2AI score0.12658EPSS
SaveExploits1References2
Rows per page
Query Builder