CVE-2018-18513: Null Pointer Dereference

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1533300
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-03/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-03/#CVE-2018-18501
• https://www.mozilla.org/security/advisories/mfsa2019-03/
• https://www.mozilla.org/en-US/security/advisories/mfsa2019-03/#CVE-2018-18513
• https://security-tracker.debian.org/tracker/CVE-2018-18513

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2019-03

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2018-18500
• CVE-2018-18505
• CVE-2018-18512
• CVE-2016-5824
• CVE-2018-18513
• CVE-2018-18501

Frequently Asked Questions

• What is CVE-2018-18513?

  CVE-2018-18513 is a vulnerability that can cause a crash when processing a crafted S/MIME message or an XPI package containing a crafted signature in Thunderbird.

• How can CVE-2018-18513 be exploited?

  CVE-2018-18513 can be exploited by sending a crafted S/MIME message or an XPI package with a crafted signature to a vulnerable version of Thunderbird, causing it to crash.

• What is the severity of CVE-2018-18513?

  CVE-2018-18513 has a severity rating of high with a CVSS score of 7.5.

• Which versions of Thunderbird are affected by CVE-2018-18513?

  Thunderbird versions prior to 60.5 are affected by CVE-2018-18513.

• How do I fix CVE-2018-18513?

  To fix CVE-2018-18513, update Thunderbird to version 60.5 or later.