Search for packages
Package details: pkg:alpm/archlinux/thunderbird@52.6.0-2
purl pkg:alpm/archlinux/thunderbird@52.6.0-2
Next non-vulnerable version 52.7.0-1
Latest non-vulnerable version 91.10-1
Risk 4.5
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-125v-6567-aaam
Aliases:
CVE-2018-5146
An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7.
52.7.0-1
Affected by 0 other vulnerabilities.
VCID-33nn-wuuj-aaam
Aliases:
CVE-2018-5144
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.
52.7.0-1
Affected by 0 other vulnerabilities.
VCID-9g69-q4vw-aaaf
Aliases:
CVE-2018-5145
Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.
52.7.0-1
Affected by 0 other vulnerabilities.
VCID-btsd-n58p-aaak
Aliases:
CVE-2018-5127
A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.
52.7.0-1
Affected by 0 other vulnerabilities.
VCID-uzrz-ytcf-aaah
Aliases:
CVE-2018-5129
A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.
52.7.0-1
Affected by 0 other vulnerabilities.
VCID-w7q6-dupa-aaap
Aliases:
CVE-2018-5125
Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.
52.7.0-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:44:36.613980+00:00 Arch Linux Importer Affected by VCID-w7q6-dupa-aaap https://security.archlinux.org/AVG-663 36.0.0
2025-03-28T07:44:36.581999+00:00 Arch Linux Importer Affected by VCID-btsd-n58p-aaak https://security.archlinux.org/AVG-663 36.0.0
2025-03-28T07:44:36.549480+00:00 Arch Linux Importer Affected by VCID-uzrz-ytcf-aaah https://security.archlinux.org/AVG-663 36.0.0
2025-03-28T07:44:36.517208+00:00 Arch Linux Importer Affected by VCID-33nn-wuuj-aaam https://security.archlinux.org/AVG-663 36.0.0
2025-03-28T07:44:36.481989+00:00 Arch Linux Importer Affected by VCID-9g69-q4vw-aaaf https://security.archlinux.org/AVG-663 36.0.0
2025-03-28T07:44:36.459177+00:00 Arch Linux Importer Affected by VCID-125v-6567-aaam https://security.archlinux.org/AVG-663 36.0.0
2024-09-18T01:59:40.613119+00:00 Arch Linux Importer Affected by VCID-w7q6-dupa-aaap https://security.archlinux.org/AVG-663 34.0.1
2024-09-18T01:59:40.584962+00:00 Arch Linux Importer Affected by VCID-btsd-n58p-aaak https://security.archlinux.org/AVG-663 34.0.1
2024-09-18T01:59:40.556749+00:00 Arch Linux Importer Affected by VCID-uzrz-ytcf-aaah https://security.archlinux.org/AVG-663 34.0.1
2024-09-18T01:59:40.528339+00:00 Arch Linux Importer Affected by VCID-33nn-wuuj-aaam https://security.archlinux.org/AVG-663 34.0.1
2024-09-18T01:59:40.498227+00:00 Arch Linux Importer Affected by VCID-9g69-q4vw-aaaf https://security.archlinux.org/AVG-663 34.0.1
2024-09-18T01:59:40.469221+00:00 Arch Linux Importer Affected by VCID-125v-6567-aaam https://security.archlinux.org/AVG-663 34.0.1
2024-01-09T19:34:37.533986+00:00 Arch Linux Importer Affected by VCID-w7q6-dupa-aaap https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-09T19:34:37.512134+00:00 Arch Linux Importer Affected by VCID-btsd-n58p-aaak https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-09T19:34:37.489941+00:00 Arch Linux Importer Affected by VCID-uzrz-ytcf-aaah https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-09T19:34:37.468214+00:00 Arch Linux Importer Affected by VCID-33nn-wuuj-aaam https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-09T19:34:37.446175+00:00 Arch Linux Importer Affected by VCID-9g69-q4vw-aaaf https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-09T19:34:37.424248+00:00 Arch Linux Importer Affected by VCID-125v-6567-aaam https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-03T22:25:56.409873+00:00 Arch Linux Importer Affected by VCID-w7q6-dupa-aaap https://security.archlinux.org/AVG-663 34.0.0rc1
2024-01-03T22:25:56.385701+00:00 Arch Linux Importer Affected by VCID-btsd-n58p-aaak https://security.archlinux.org/AVG-663 34.0.0rc1
2024-01-03T22:25:56.359162+00:00 Arch Linux Importer Affected by VCID-uzrz-ytcf-aaah https://security.archlinux.org/AVG-663 34.0.0rc1
2024-01-03T22:25:56.332685+00:00 Arch Linux Importer Affected by VCID-33nn-wuuj-aaam https://security.archlinux.org/AVG-663 34.0.0rc1
2024-01-03T22:25:56.306774+00:00 Arch Linux Importer Affected by VCID-9g69-q4vw-aaaf https://security.archlinux.org/AVG-663 34.0.0rc1
2024-01-03T22:25:56.280747+00:00 Arch Linux Importer Affected by VCID-125v-6567-aaam https://security.archlinux.org/AVG-663 34.0.0rc1