Search for packages
Package details: pkg:alpm/archlinux/thunderbird@52.7.0-1
purl pkg:alpm/archlinux/thunderbird@52.7.0-1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (6)
Vulnerability Summary Aliases
VCID-125v-6567-aaam An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnerability affects Firefox < 59.0.1, Firefox ESR < 52.7.2, and Thunderbird < 52.7. CVE-2018-5146
VCID-33nn-wuuj-aaam An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. CVE-2018-5144
VCID-9g69-q4vw-aaaf Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. CVE-2018-5145
VCID-btsd-n58p-aaak A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. CVE-2018-5127
VCID-uzrz-ytcf-aaah A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. CVE-2018-5129
VCID-w7q6-dupa-aaap Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. CVE-2018-5125

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:44:36.618861+00:00 Arch Linux Importer Fixing VCID-w7q6-dupa-aaap https://security.archlinux.org/AVG-663 36.0.0
2025-03-28T07:44:36.586905+00:00 Arch Linux Importer Fixing VCID-btsd-n58p-aaak https://security.archlinux.org/AVG-663 36.0.0
2025-03-28T07:44:36.554273+00:00 Arch Linux Importer Fixing VCID-uzrz-ytcf-aaah https://security.archlinux.org/AVG-663 36.0.0
2025-03-28T07:44:36.522125+00:00 Arch Linux Importer Fixing VCID-33nn-wuuj-aaam https://security.archlinux.org/AVG-663 36.0.0
2025-03-28T07:44:36.486434+00:00 Arch Linux Importer Fixing VCID-9g69-q4vw-aaaf https://security.archlinux.org/AVG-663 36.0.0
2025-03-28T07:44:36.464095+00:00 Arch Linux Importer Fixing VCID-125v-6567-aaam https://security.archlinux.org/AVG-663 36.0.0
2024-09-18T01:59:40.618250+00:00 Arch Linux Importer Fixing VCID-w7q6-dupa-aaap https://security.archlinux.org/AVG-663 34.0.1
2024-09-18T01:59:40.590141+00:00 Arch Linux Importer Fixing VCID-btsd-n58p-aaak https://security.archlinux.org/AVG-663 34.0.1
2024-09-18T01:59:40.561930+00:00 Arch Linux Importer Fixing VCID-uzrz-ytcf-aaah https://security.archlinux.org/AVG-663 34.0.1
2024-09-18T01:59:40.533527+00:00 Arch Linux Importer Fixing VCID-33nn-wuuj-aaam https://security.archlinux.org/AVG-663 34.0.1
2024-09-18T01:59:40.503319+00:00 Arch Linux Importer Fixing VCID-9g69-q4vw-aaaf https://security.archlinux.org/AVG-663 34.0.1
2024-09-18T01:59:40.474316+00:00 Arch Linux Importer Fixing VCID-125v-6567-aaam https://security.archlinux.org/AVG-663 34.0.1
2024-01-09T19:34:37.538719+00:00 Arch Linux Importer Fixing VCID-w7q6-dupa-aaap https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-09T19:34:37.516765+00:00 Arch Linux Importer Fixing VCID-btsd-n58p-aaak https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-09T19:34:37.494671+00:00 Arch Linux Importer Fixing VCID-uzrz-ytcf-aaah https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-09T19:34:37.472758+00:00 Arch Linux Importer Fixing VCID-33nn-wuuj-aaam https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-09T19:34:37.450833+00:00 Arch Linux Importer Fixing VCID-9g69-q4vw-aaaf https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-09T19:34:37.428876+00:00 Arch Linux Importer Fixing VCID-125v-6567-aaam https://security.archlinux.org/AVG-663 34.0.0rc2
2024-01-03T22:25:56.414528+00:00 Arch Linux Importer Fixing VCID-w7q6-dupa-aaap https://security.archlinux.org/AVG-663 34.0.0rc1
2024-01-03T22:25:56.390335+00:00 Arch Linux Importer Fixing VCID-btsd-n58p-aaak https://security.archlinux.org/AVG-663 34.0.0rc1
2024-01-03T22:25:56.363889+00:00 Arch Linux Importer Fixing VCID-uzrz-ytcf-aaah https://security.archlinux.org/AVG-663 34.0.0rc1
2024-01-03T22:25:56.337392+00:00 Arch Linux Importer Fixing VCID-33nn-wuuj-aaam https://security.archlinux.org/AVG-663 34.0.0rc1
2024-01-03T22:25:56.311421+00:00 Arch Linux Importer Fixing VCID-9g69-q4vw-aaaf https://security.archlinux.org/AVG-663 34.0.0rc1
2024-01-03T22:25:56.285446+00:00 Arch Linux Importer Fixing VCID-125v-6567-aaam https://security.archlinux.org/AVG-663 34.0.0rc1