DSA-4362-1 thunderbird - security update

Bulletin has no description...

DSA-4327-1 thunderbird - security update

Bulletin has no description...

CVE-2018-12374

Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text input field. This vulnerability affects Thunderbird 52.9...

CVE-2017-5442

A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

CVE-2017-5447

An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The use of this tool after its release in FontTableRec within Mozilla Firefox, Firefox ESR, and Thunderbird allows malicious actors who operate remotely to execute arbitrary code by improperly handling the fonts contained in MathML. This leads to incorrect processing of the DirectWrite font objec...