Mozilla Thunderbird MFSA2018-18 Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	104613
Class:	Design Error
CVE:	CVE-2018-12372 CVE-2018-12373 CVE-2018-12374
Remote:	Yes
Local:	No
Published:	Jul 03 2018 12:00AM
Updated:	Jul 03 2018 12:00AM
Credit:	Damian Poddebniak, Christian Dresen, Jens Muller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, Jorg Schwenk and Hanno Boeck
Vulnerable:	Mozilla Thunderbird 45.5.1 Mozilla Thunderbird 45.1.1 Mozilla Thunderbird 24.1.1 Mozilla Thunderbird 24.0.1 Mozilla Thunderbird 17.0.7 Mozilla Thunderbird 17.0.6 Mozilla Thunderbird 17.0.5 Mozilla Thunderbird 17.0.4 Mozilla Thunderbird 17.0.3 Mozilla Thunderbird 17.0.2 Mozilla Thunderbird 17.0.1 Mozilla Thunderbird 16.0.2 Mozilla Thunderbird 15.0.1 Mozilla Thunderbird 13.0.1 Mozilla Thunderbird 12.0.1 Mozilla Thunderbird 3.1.20 Mozilla Thunderbird 3.1.14 Mozilla Thunderbird 3.1.13 Mozilla Thunderbird 3.1.12 Mozilla Thunderbird 3.1.7 Mozilla Thunderbird 3.1.5 Mozilla Thunderbird 3.1.4 Mozilla Thunderbird 3.0.11 Mozilla Thunderbird 3.0.9 Mozilla Thunderbird 3.0.8 Mozilla Thunderbird 3.0.5 Mozilla Thunderbird 3.0.4 Mozilla Thunderbird 3.0.2 Mozilla Thunderbird 3.0.1 Mozilla Thunderbird 2.0 24 Mozilla Thunderbird 2.0 .9 Mozilla Thunderbird 2.0 .8 Mozilla Thunderbird 2.0 .6 Mozilla Thunderbird 2.0 .5 Mozilla Thunderbird 2.0 .4 Mozilla Thunderbird 2.0 .19 Mozilla Thunderbird 2.0 .17 Mozilla Thunderbird 2.0 .16 Mozilla Thunderbird 2.0 .15 Mozilla Thunderbird 2.0 .14 Mozilla Thunderbird 2.0 .13 Mozilla Thunderbird 2.0 .12 Mozilla Thunderbird 1.5 Mozilla Thunderbird 1.0.8 Mozilla Thunderbird 1.0.7 Mozilla Thunderbird 1.0.6 Mozilla Thunderbird 1.0.5 Mozilla Thunderbird 1.0.2 Mozilla Thunderbird 1.0.1 Mozilla Thunderbird 1.0 Mozilla Thunderbird 0.9 Mozilla Thunderbird 0.8 Mozilla Thunderbird 0.7.3 Mozilla Thunderbird 0.7.2 Mozilla Thunderbird 0.7.1 Mozilla Thunderbird 0.7 Mozilla Thunderbird 0.6 Mozilla Thunderbird 9.0.1 Mozilla Thunderbird 9.0 Mozilla Thunderbird 8.0 Mozilla Thunderbird 7.0.1 Mozilla Thunderbird 7.0 Mozilla Thunderbird 6.0.2 Mozilla Thunderbird 6.0.1 Mozilla Thunderbird 6.0 Mozilla Thunderbird 6 Mozilla Thunderbird 52.8 Mozilla Thunderbird 52.5 Mozilla Thunderbird 52.4 Mozilla Thunderbird 52.3 Mozilla Thunderbird 52.2 Mozilla Thunderbird 52.1 Mozilla Thunderbird 52 Mozilla Thunderbird 5 Mozilla Thunderbird 45.8 Mozilla Thunderbird 45.7 Mozilla Thunderbird 45.6 Mozilla Thunderbird 45.4 Mozilla Thunderbird 38.1 Mozilla Thunderbird 32.0 Mozilla Thunderbird 31.8 Mozilla Thunderbird 31.7 Mozilla Thunderbird 31.6 Mozilla Thunderbird 31.5 Mozilla Thunderbird 31.4 Mozilla Thunderbird 31.3 Mozilla Thunderbird 31.2 Mozilla Thunderbird 31.1.2 Mozilla Thunderbird 31.1.1 Mozilla Thunderbird 31.1.0 Mozilla Thunderbird 31.1 Mozilla Thunderbird 31.0 Mozilla Thunderbird 31 Mozilla Thunderbird 3.3 Mozilla Thunderbird 3.1.9 Mozilla Thunderbird 3.1.8 Mozilla Thunderbird 3.1.6 Mozilla Thunderbird 3.1.3 Mozilla Thunderbird 3.1.2 Mozilla Thunderbird 3.1.19 Mozilla Thunderbird 3.1.18 Mozilla Thunderbird 3.1.17 Mozilla Thunderbird 3.1.16 Mozilla Thunderbird 3.1.15 Mozilla Thunderbird 3.1.11 Mozilla Thunderbird 3.1.10 Mozilla Thunderbird 3.1.1 Mozilla Thunderbird 3.1 Mozilla Thunderbird 3.0.7 Mozilla Thunderbird 3.0.6 Mozilla Thunderbird 3.0.3 Mozilla Thunderbird 3.0.10 Mozilla Thunderbird 3.0 Mozilla Thunderbird 24.8.1 Mozilla Thunderbird 24.8 Mozilla Thunderbird 24.7 Mozilla Thunderbird 24.6 Mozilla Thunderbird 24.5 Mozilla Thunderbird 24.4 Mozilla Thunderbird 24.3 Mozilla Thunderbird 24.2 Mozilla Thunderbird 24.1 Mozilla Thunderbird 24.0 Mozilla Thunderbird 23.0 Mozilla Thunderbird 2.1 Mozilla Thunderbird 2.0.0.23 Mozilla Thunderbird 2.0.0.22 Mozilla Thunderbird 2.0.0.21 Mozilla Thunderbird 2.0.0.20 Mozilla Thunderbird 2.0.0.18 Mozilla Thunderbird 2.0.0.11 Mozilla Thunderbird 17.0.9 Mozilla Thunderbird 17.0.8 Mozilla Thunderbird 17.0 Mozilla Thunderbird 16.0.1 Mozilla Thunderbird 16.0 Mozilla Thunderbird 16 Mozilla Thunderbird 15.0 Mozilla Thunderbird 15 Mozilla Thunderbird 14.0 Mozilla Thunderbird 14 Mozilla Thunderbird 13.0 Mozilla Thunderbird 12.0 Mozilla Thunderbird 11.0.1 Mozilla Thunderbird 11.0 Mozilla Thunderbird 10.0.4 Mozilla Thunderbird 10.0.3 Mozilla Thunderbird 10.0.2 Mozilla Thunderbird 10.0.1 Mozilla Thunderbird 10.0 Mozilla Thunderbird 1.5.0.7 Mozilla Thunderbird 1.5.0.5 Mozilla Thunderbird 1.5.0.2 Mozilla Thunderbird 1.5.0.14 Mozilla Thunderbird 1.5.0.12 Mozilla Thunderbird 1.5.0.10 Mozilla Thunderbird 1.5.0.1
Not Vulnerable:	Mozilla Thunderbird 52.9

Mozilla Thunderbird MFSA2018-18 Multiple Information Disclosure Vulnerabilities

Mozilla Thunderbird is prone to multiple information-disclosure vulnerabilities.

An attacker can exploit these issues to gain access to sensitive information; this may lead to further attacks.

These issues are fixed in:

Thunderbird 52.9

Mozilla Thunderbird MFSA2018-18 Multiple Information Disclosure Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Mozilla Thunderbird MFSA2018-18 Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Mozilla Thunderbird MFSA2018-18 Multiple Information Disclosure Vulnerabilities

References:

• Mozilla Firefox Homepage (Mozilla)
  
• MFSA2018-18 Security vulnerabilities fixed in Thunderbird 52.9 (Mozilla)