Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:thunderbird:52.9.1:*:*:*:*:*:*:*

part: a version: 52.9.1 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductThunderbird (e5553559-8c71-58cd-a1a6-c5f5cf77e32f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/thunderbird purl2cpe 2026-06-01 10:17:53.986991
pkg:mozilla/comm-central purl2cpe 2026-06-01 10:17:53.986993
pkg:rpm/fedora/thunderbird purl2cpe 2026-06-01 10:17:53.986995
pkg:rpm/opensuse/mozillathunderbird purl2cpe 2026-06-01 10:17:53.986996

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-12359 vulnerable 2026-06-03 14:38:04.196840 Details available
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing data to be written outside of the currently computed boundaries. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
Published: 2018-10-18T13:00:00.000Z
Updated: 2024-08-05T08:30:59.942Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.