OPENSUSE-SU-2017:3434-1: MozillaThunderbird&distro=SUSE Package Hub 12 SUSE Linux Enterprise
Vulnerability summary
OPENSUSE-SU-2017:3434-1 is a vulnerability in MozillaThunderbird&distro=SUSE Package Hub 12 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 4 · Downstream 0 · Related 4Timeline
- 24-12-2017PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for Mozilla Thunderbird This update for Mozilla Thunderbird to version 52.5.2 fixes the following vulnerabilities: - CVE-2017-7846: JavaScript Execution via RSS in mailbox:// origin (bsc#1074043) - CVE-2017-7847: Local path string can be leaked from RSS feed (bsc#1074044) - CVE-2017-7848: RSS Feed vulnerable to new line Injection (bsc#1074045) - CVE-2017-7829: From address with encoded null character is cut off in message header display (bsc#1074046)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse1 product
- MozillaThunderbird&distro=SUSE Package Hub 12< 52.5.2-51.1
1 vendor · 1 product
References
9 links- lists.opensuse.org/archives/…Advisory