AVG-803

Package thunderbird
Status Fixed
Severity Critical
Type arbitrary code execution
Affected 60.2.1-2
Fixed 60.3.0-1
Current 60.7.1-1 [extra]
Ticket None
Created Fri Nov 2 09:06:18 2018
Issue Severity Remote Type Description
CVE-2018-12392 Critical Yes Arbitrary code execution
A security issue has been found in Firefox and Thunderbird versions prior to 63.0. When manipulating user events in nested loops while opening a document...
CVE-2018-12390 Critical Yes Arbitrary code execution
Several memory safety bugs have been found in Firefox and Thunderbird versions prior to 63.0. Some of these bugs showed evidence of memory corruption and...
CVE-2018-12389 Critical Yes Arbitrary code execution
Several memory safety bugs have been found in Thunderbird versions prior to 63.0. Some of these bugs showed evidence of memory corruption and Mozilla...
Date Advisory Package Description
06 Nov 2018 ASA-201811-10 thunderbird arbitrary code execution
References
https://www.mozilla.org/en-US/security/advisories/mfsa2018-28/