Mozilla Thunderbird JavaScript Execution Vulnerability (CVE-2017-7846)

Mozilla Thunderbird JavaScript Execution Vulnerability (CVE-2017-7846)
Mozilla Thunderbird JavaScript Execution Vulnerability (CVE-2017-7846)

Release date:
Updated on:

Affected Systems:

Mozilla Thunderbird <52.5.2

Description:

Bugtraq id: 102258
CVE (CAN) ID: CVE-2017-7846

Thunderbird is a mail client tool that supports IMAP and POP3.

In versions earlier than Thunderbird 52.5.2, a security vulnerability exists in parsing RSS feeds. Attackers can exploit this vulnerability to bypass security restrictions, perform unauthorized operations, and obtain sensitive information.

<* Source: Cure53
*>

Suggestion:

Vendor patch:

Mozilla
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.mozilla.com/en-US/
Https://www.mozilla.org/en-US/security/advisories/mfsa2017-30/

Red Hat Enterprise 6.3 manual installation of Thunderbird

Use apt-get to install FireFox and ThunderBird In Debian Linux

Ubuntu's Guide to Using Thunderbird [graphic]

Install Thunderbird 3 and Chinese display settings on Ubuntu

Use Evolution and Thunderbird to send and receive emails in Ubuntu

For more information about Thunderbird, click here.
Thunderbird: click here