PT-2017-17949 · Mozilla+5 · Thunderbird+5

Cure53 · Publicado 2017-12-22 · Atualizado 2024-06-15 · CVE-2017-7847

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 52.5.2

Description The issue allows crafted CSS in an RSS feed to leak and reveal local path strings, potentially containing user names.

Recommendations For versions prior to 52.5.2, update to version 52.5.2 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2017-2838

CESA-2018_0061

CVE-2017-7847

DLA-1223-1

DSA-4075-1

MGASA-2017-0477

OPENSUSE-SU-2017:3433-1

OPENSUSE-SU-2017:3434-1

OPENSUSE-SU-2017_3434-1

OPENSUSE-SU-2024:10601-1

RHSA-2018:0061

RHSA-2018_0061

USN-3529-1

Produtos afetados

Alt Linux

Centos

Red Hat

Suse

Thunderbird

Ubuntu

Referências · 440

• https://suse.com/security/cve/CVE-2020-12421 · Nota
• https://suse.com/security/cve/CVE-2018-12405 · Nota
• https://suse.com/security/cve/CVE-2021-23968 · Nota
• https://suse.com/security/cve/CVE-2020-6794 · Nota
• https://suse.com/security/cve/CVE-2020-15677 · Nota
• https://suse.com/security/cve/CVE-2019-11739 · Nota
• https://suse.com/security/cve/CVE-2017-7807 · Nota
• https://suse.com/security/cve/CVE-2017-7786 · Nota
• https://suse.com/security/cve/CVE-2019-11729 · Nota
• https://suse.com/security/cve/CVE-2021-29964 · Nota
• https://suse.com/security/cve/CVE-2008-4067 · Nota
• https://mozilla.org/en-US/security/advisories/mfsa2017-30/#CVE-2017-7847 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2019-5785 · Nota
• https://suse.com/security/cve/CVE-2018-5184 · Nota
• https://suse.com/security/cve/CVE-2008-4065 · Nota