USN-3490-1: Thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing-like context, an attacker could potentially exploit these to bypass same-origin restrictions, cause a denial of service via application crash, or execute arbitrary code. (CVE-2017-7826, CVE-2017-7828, CVE-2017-7830)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Thunderbird vulnerability?
The vulnerability ID for this Thunderbird vulnerability is CVE-2017-7826.
What is the severity of CVE-2017-7826?
The severity of CVE-2017-7826 is not stated in the provided information.
How can an attacker exploit CVE-2017-7826?
An attacker can potentially exploit CVE-2017-7826 to bypass same-origin restrictions, cause a denial of service via application crash, or execute arbitrary code.
Which versions of Thunderbird are affected by CVE-2017-7826?
Versions 1:52.5.0+build1-0ubuntu0.17.10.1, 1:52.5.0+build1-0ubuntu0.17.04.1, 1:52.5.0+build1-0ubuntu0.16.04.1, and 1:52.5.0+build1-0ubuntu0.14.04.1 of Thunderbird are affected by CVE-2017-7826.
How do I fix the Thunderbird vulnerability CVE-2017-7826?
To fix the Thunderbird vulnerability CVE-2017-7826, update your Thunderbird installation to version 1:52.5.0+build1-0ubuntu0.17.10.1, 1:52.5.0+build1-0ubuntu0.17.04.1, 1:52.5.0+build1-0ubuntu0.16.04.1, or 1:52.5.0+build1-0ubuntu0.14.04.1.