Lucene search
K

11 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:22 a.m.2 views

SUSE CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

8.8CVSS9.3AI score0.35406EPSS
Exploits1References20
Tenable Nessus
Tenable Nessus
added 2019/08/12 12:0 a.m.37 views

NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0093)

The remote NewStart CGSL host, running version MAIN 4.06, has thunderbird packages installed that are affected by multiple vulnerabilities: - libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file. CVE-2016-5824 - A use-after-free vulnerability can...

10CVSS8AI score0.35406EPSS
Exploits1References11
OSV
OSV
added 2019/02/13 11:8 a.m.6 views

MGASA-2019-0069 Updated thunderbird packages fix security vulnerability

Use-after-free parsing HTML5 stream. CVE-2018-18500 Privilege escalation through IPC channel messages. CVE-2018-18505 Memory safety bugs fixed in Firefox 65, Firefox ESR 60.5, and Thunderbird 60.5. CVE-2018-18501...

10CVSS10AI score0.35406EPSS
Exploits1References4
OSV
OSV
added 2019/02/12 2:59 p.m.7 views

SUSE-SU-2019:0338-1 Security update for MozillaThunderbird

This update for MozillaThunderbird to version 60.5 fixes the following issues: Security vulnerabilities addressed MSFA 2019-03 MSFA 2018-31 bsc1122983 bsc1119105: CVE-2018-18500: Use-after-free parsing HTML5 stream CVE-2018-18505: Privilege escalation through IPC channel messages CVE-2016-5824 Do...

10CVSS9.4AI score0.35406EPSS
Exploits1References13
OSV
OSV
added 2019/02/05 9:29 p.m.1 views

DEBIAN-CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS9.2AI score0.35406EPSS
Exploits1References1
OSV
OSV
added 2019/02/05 9:29 p.m.6 views

CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS9.2AI score
Exploits0References17
RedHat Linux
RedHat Linux
added 2019/02/04 8:45 p.m.2 views

Mozilla: Use-after-free parsing HTML5 stream

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS7.3AI score0.35406EPSS
Exploits1References5
OSV
OSV
added 2019/01/30 12:0 a.m.0 views

UBUNTU-CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS7.3AI score0.35406EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2019/01/30 12:0 a.m.24 views

CVE-2018-18500

A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash. This vulnerability affects Thunderbird 60.5, Firefox ESR 60.5, and...

9.8CVSS7.2AI score0.35406EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2019/01/30 12:0 a.m.26 views

Mozilla Firefox ESR Security Advisories (MFSA2018-31, MFSA2019-03) - Mac OS X

Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...

10CVSS10AI score0.35406EPSS
Exploits1References1
FreeBSD
FreeBSD
added 2019/01/29 12:0 a.m.63 views

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: CVE-2018-18500: Use-after-free parsing HTML5 stream CVE-2018-18503: Memory corruption with Audio Buffer CVE-2018-18504: Memory corruption and out-of-bounds read of texture client buffer CVE-2018-18505: Privilege escalation through IPC channel messages CVE-2018-18506:...

10CVSS2.2AI score0.35406EPSS
Exploits1References2
Rows per page
Query Builder