{"schemaVersion":3,"id":"OPENSUSE-SU-2017:1579-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for Mozilla Thunderbird\n\nThis update to Thunderbird 52.2 fixes security issues and bugs.\n\nThe following vulnerabilities were fixed:\n\n* CVE-2017-5472: Use-after-free using destroyed node when regenerating trees\n* CVE-2017-7749: Use-after-free during docshell reloading\n* CVE-2017-7750: Use-after-free with track elements\n* CVE-2017-7751: Use-after-free with content viewer listeners\n* CVE-2017-7752: Use-after-free with IME input\n* CVE-2017-7754: Out-of-bounds read in WebGL with ImageInfo object\n* CVE-2017-7756: Use-after-free and use-after-scope logging XHR header errors\n* CVE-2017-7757: Use-after-free in IndexedDB\n* CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,\n  CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,\n  CVE-2017-7777: Vulnerabilities in the Graphite 2 library\n* CVE-2017-7758: Out-of-bounds read in Opus encoder\n* CVE-2017-7764: Domain spoofing with combination of Canadian Syllabics and other unicode blocks\n* CVE-2017-5470: Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2\n\nMozilla Thunderbird now requires NSS 3.28.5.\n\nThe following bugs were fixed:\n\n* Embedded images not shown in email received from Hotmail/Outlook webmailer\n* Detection of non-ASCII font names in font selector\n* Attachment not forwarded correctly under certain circumstances\n* Multiple requests for master password when GMail OAuth2 is enabled\n* Large number of blank pages being printed under certain circumstances when invalid preferences were present\n* Messages sent via the Simple MAPI interface are forced to HTML\n* Calendar: Invitations can't be printed\n* Mailing list (group) not accessible from macOS or Outlook address book\n* Clicking on links with references/anchors where target doesn't exist in the message not opening in external browser","dates":{"published":"2017-06-16T09:03:31.000Z","modified":"2026-02-04T03:49:02.663Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"MozillaThunderbird&distro=SUSE Package Hub 12","name":"MozillaThunderbird","label":"MozillaThunderbird&distro=SUSE Package Hub 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/MozillaThunderbird&distro=SUSE Package Hub 12","purlType":"rpm","versions":[{"text":"< 52.2-36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 52.2-36.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://bugzilla.suse.com/1040105","label":"bugzilla.suse.com/1040105","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1042090","label":"bugzilla.suse.com/1042090","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1043960","label":"bugzilla.suse.com/1043960","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1273265","label":"bugzilla.suse.com/1273265","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1355039","label":"bugzilla.suse.com/1355039","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1356558","label":"bugzilla.suse.com/1356558","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1356824","label":"bugzilla.suse.com/1356824","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1357090","label":"bugzilla.suse.com/1357090","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1359547","label":"bugzilla.suse.com/1359547","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1360309","label":"bugzilla.suse.com/1360309","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1363396","label":"bugzilla.suse.com/1363396","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1364283","label":"bugzilla.suse.com/1364283","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1365602","label":"bugzilla.suse.com/1365602","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1366595","label":"bugzilla.suse.com/1366595","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1368490","label":"bugzilla.suse.com/1368490","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5470","label":"www.suse.com/security/cve/CVE-2017-5470","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5472","label":"www.suse.com/security/cve/CVE-2017-5472","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7749","label":"www.suse.com/security/cve/CVE-2017-7749","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7750","label":"www.suse.com/security/cve/CVE-2017-7750","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7751","label":"www.suse.com/security/cve/CVE-2017-7751","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7752","label":"www.suse.com/security/cve/CVE-2017-7752","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7754","label":"www.suse.com/security/cve/CVE-2017-7754","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7756","label":"www.suse.com/security/cve/CVE-2017-7756","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7757","label":"www.suse.com/security/cve/CVE-2017-7757","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7758","label":"www.suse.com/security/cve/CVE-2017-7758","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7763","label":"www.suse.com/security/cve/CVE-2017-7763","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7764","label":"www.suse.com/security/cve/CVE-2017-7764","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7765","label":"www.suse.com/security/cve/CVE-2017-7765","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7771","label":"www.suse.com/security/cve/CVE-2017-7771","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7772","label":"www.suse.com/security/cve/CVE-2017-7772","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7773","label":"www.suse.com/security/cve/CVE-2017-7773","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7774","label":"www.suse.com/security/cve/CVE-2017-7774","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7775","label":"www.suse.com/security/cve/CVE-2017-7775","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7776","label":"www.suse.com/security/cve/CVE-2017-7776","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7777","label":"www.suse.com/security/cve/CVE-2017-7777","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7778","label":"www.suse.com/security/cve/CVE-2017-7778","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2017-5470","CVE-2017-5472","CVE-2017-7749","CVE-2017-7750","CVE-2017-7751","CVE-2017-7752","CVE-2017-7754","CVE-2017-7756","CVE-2017-7757","CVE-2017-7758","CVE-2017-7763","CVE-2017-7764","CVE-2017-7765","CVE-2017-7771","CVE-2017-7772","CVE-2017-7773","CVE-2017-7774","CVE-2017-7775","CVE-2017-7776","CVE-2017-7777","CVE-2017-7778"],"downstream":[],"duplicates":[],"related":["CVE-2017-5470","CVE-2017-5472","CVE-2017-7749","CVE-2017-7750","CVE-2017-7751","CVE-2017-7752","CVE-2017-7754","CVE-2017-7756","CVE-2017-7757","CVE-2017-7758","CVE-2017-7763","CVE-2017-7764","CVE-2017-7765","CVE-2017-7771","CVE-2017-7772","CVE-2017-7773","CVE-2017-7774","CVE-2017-7775","CVE-2017-7776","CVE-2017-7777","CVE-2017-7778"]},"timeline":[{"kind":"published","date":"2017-06-16T09:03:31.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:49:02.663Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T20:34:23.972Z","stale":false,"partial":false}}