RETIRED: Mozilla Thunderbird MFSA2018-28 Multiple Security Vulnerabilities

Bugtraq ID:	105769
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 31 2018 12:00AM
Updated:	Apr 15 2019 09:00PM
Credit:	Jun Kokatsu, Nils, and r.
Vulnerable:	Mozilla Thunderbird 60.2.1 Mozilla Thunderbird 52.5.2 Mozilla Thunderbird 45.5.1 Mozilla Thunderbird 45.1.1 Mozilla Thunderbird 24.1.1 Mozilla Thunderbird 24.0.1 Mozilla Thunderbird 17.0.7 Mozilla Thunderbird 17.0.6 Mozilla Thunderbird 17.0.5 Mozilla Thunderbird 17.0.4 Mozilla Thunderbird 17.0.3 Mozilla Thunderbird 17.0.2 Mozilla Thunderbird 17.0.1 Mozilla Thunderbird 16.0.2 Mozilla Thunderbird 15.0.1 Mozilla Thunderbird 13.0.1 Mozilla Thunderbird 12.0.1 Mozilla Thunderbird 3.1.20 Mozilla Thunderbird 3.1.14 Mozilla Thunderbird 3.1.13 Mozilla Thunderbird 3.1.12 Mozilla Thunderbird 3.1.7 Mozilla Thunderbird 3.1.5 Mozilla Thunderbird 3.1.4 Mozilla Thunderbird 3.0.11 Mozilla Thunderbird 3.0.9 Mozilla Thunderbird 3.0.8 Mozilla Thunderbird 3.0.5 Mozilla Thunderbird 3.0.4 Mozilla Thunderbird 3.0.2 Mozilla Thunderbird 3.0.1 Mozilla Thunderbird 2.0 24 Mozilla Thunderbird 2.0 .9 Mozilla Thunderbird 2.0 .8 Mozilla Thunderbird 2.0 .6 Mozilla Thunderbird 2.0 .5 Mozilla Thunderbird 2.0 .4 Mozilla Thunderbird 2.0 .19 Mozilla Thunderbird 2.0 .17 Mozilla Thunderbird 2.0 .16 Mozilla Thunderbird 2.0 .15 Mozilla Thunderbird 2.0 .14 Mozilla Thunderbird 2.0 .13 Mozilla Thunderbird 2.0 .12 Mozilla Thunderbird 1.5 Mozilla Thunderbird 1.0.5 Mozilla Thunderbird 1.0.2 Mozilla Thunderbird 1.0.1 Mozilla Thunderbird 1.0 Mozilla Thunderbird 0.9 Mozilla Thunderbird 0.8 Mozilla Thunderbird 0.7.3 Mozilla Thunderbird 0.7.2 Mozilla Thunderbird 0.7.1 Mozilla Thunderbird 0.7 Mozilla Thunderbird 0.6 Mozilla Thunderbird 7.0 Mozilla Thunderbird 60.0 Mozilla Thunderbird 60 Mozilla Thunderbird 6.0.2 Mozilla Thunderbird 6.0.1 Mozilla Thunderbird 6.0 Mozilla Thunderbird 6 Mozilla Thunderbird 52.9 Mozilla Thunderbird 52.8 Mozilla Thunderbird 52.5 Mozilla Thunderbird 52.4 Mozilla Thunderbird 52.3 Mozilla Thunderbird 52.2 Mozilla Thunderbird 52.1 Mozilla Thunderbird 52 Mozilla Thunderbird 5 Mozilla Thunderbird 45.8 Mozilla Thunderbird 45.7 Mozilla Thunderbird 45.6 Mozilla Thunderbird 45.4 Mozilla Thunderbird 38.1 Mozilla Thunderbird 32.0 Mozilla Thunderbird 31.8 Mozilla Thunderbird 31.7 Mozilla Thunderbird 31.6 Mozilla Thunderbird 31.5 Mozilla Thunderbird 31.4 Mozilla Thunderbird 31.3 Mozilla Thunderbird 31.2 Mozilla Thunderbird 31.1.2 Mozilla Thunderbird 31.1.1 Mozilla Thunderbird 31.1.0 Mozilla Thunderbird 31.1 Mozilla Thunderbird 31.0 Mozilla Thunderbird 31 Mozilla Thunderbird 3.3 Mozilla Thunderbird 3.1.9 Mozilla Thunderbird 3.1.8 Mozilla Thunderbird 3.1.6 Mozilla Thunderbird 3.1.3 Mozilla Thunderbird 3.1.2 Mozilla Thunderbird 3.1.19 Mozilla Thunderbird 3.1.18 Mozilla Thunderbird 3.1.17 Mozilla Thunderbird 3.1.16 Mozilla Thunderbird 3.1.15 Mozilla Thunderbird 3.1.11 Mozilla Thunderbird 3.1.10 Mozilla Thunderbird 3.1.1 Mozilla Thunderbird 3.1 Mozilla Thunderbird 3.0.7 Mozilla Thunderbird 3.0.6 Mozilla Thunderbird 3.0.3 Mozilla Thunderbird 3.0.10 Mozilla Thunderbird 3.0 Mozilla Thunderbird 24.8 Mozilla Thunderbird 24.7 Mozilla Thunderbird 24.6 Mozilla Thunderbird 24.5 Mozilla Thunderbird 24.4 Mozilla Thunderbird 24.3 Mozilla Thunderbird 24.2 Mozilla Thunderbird 24.1 Mozilla Thunderbird 24.0 Mozilla Thunderbird 23.0 Mozilla Thunderbird 2.1 Mozilla Thunderbird 2.0.0.23 Mozilla Thunderbird 2.0.0.22 Mozilla Thunderbird 2.0.0.21 Mozilla Thunderbird 2.0.0.20 Mozilla Thunderbird 2.0.0.18 Mozilla Thunderbird 2.0.0.11 Mozilla Thunderbird 17.0.9 Mozilla Thunderbird 17.0.8 Mozilla Thunderbird 17.0 Mozilla Thunderbird 16.0.1 Mozilla Thunderbird 16.0 Mozilla Thunderbird 16 Mozilla Thunderbird 15.0 Mozilla Thunderbird 15 Mozilla Thunderbird 14.0 Mozilla Thunderbird 14 Mozilla Thunderbird 13.0 Mozilla Thunderbird 12.0 Mozilla Thunderbird 11.0.1 Mozilla Thunderbird 11.0 Mozilla Thunderbird 10.0.4 Mozilla Thunderbird 10.0
Not Vulnerable:	Mozilla Thunderbird 60.3

RETIRED: Mozilla Thunderbird MFSA2018-28 Multiple Security Vulnerabilities

Mozilla Thunderbird is prone to multiple security vulnerabilities.

Attackers can exploit these issues to bypass security restrictions and perform unauthorized actions, obtain sensitive information. Failed exploit attempts will likely result in denial-of-service conditions.

These issues are fixed in:

Thunderbird 60.3

This BID is being retired as a duplicate as the vulnerabilities described are already covered in BID 105723 Mozilla Firefox ESR CVE-2018-12389 Multiple Memory Corruption Vulnerabilities and BID 105718 Mozilla Firefox and Firefox ESR Multiple Security Vulnerabilities.

RETIRED: Mozilla Thunderbird MFSA2018-28 Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Mozilla Thunderbird MFSA2018-28 Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Mozilla Thunderbird MFSA2018-28 Multiple Security Vulnerabilities

References:

• Mozilla Firefox Homepage (Mozilla)
  
• Mozilla Foundation Security Advisory 2018-28 (Mozilla)