{
  "cveId": "CVE-2018-5145",
  "url": "https://patchblox.com/security/cve/CVE-2018-5145",
  "summary": "CVE-2018-5145 is fixed in 8 products on 1 platform, first by thunderbird 1:52.7.0\u002Bbuild1-0ubuntu1, released March 15, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "thunderbird: Memory safety bugs were reported in Firefox ESR 52.6",
  "description": "Memory safety bugs were reported in Firefox ESR 52.6. These bugs showedevidence of memory corruption and we presume that with enough effort thatsome of these could be exploited to run arbitrary code. This vulnerabilityaffects Firefox ESR \u003C 52.7 and Thunderbird \u003C 52.7.",
  "published": "2018-03-14T17:00:00Z",
  "severity": "Medium",
  "epss": 0.02964,
  "epssPercentile": 0.87282,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "thunderbird",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.7.0\u002Bbuild1-0ubuntu1",
      "fix": "thunderbird 1:52.7.0\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-1-52.7.0-build1-0ubuntu1",
      "released": "2018-03-15T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "1:52.7.0\u002Bbuild1-0ubuntu1",
      "fix": "thunderbird 1:52.7.0\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-thunderbird-1-52.7.0-build1-0ubuntu1",
      "released": "2018-03-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "1:52.7.0\u002Bbuild1-0ubuntu1",
      "fix": "thunderbird 1:52.7.0\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-thunderbird-1-52.7.0-build1-0ubuntu1",
      "released": "2018-03-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.7.0\u002Bbuild1-0ubuntu1",
      "fix": "thunderbird-globalmenu 1:52.7.0\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-globalmenu-1-52.7.0-build1-0ubuntu1",
      "released": "2018-03-15T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-gnome-support",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.7.0\u002Bbuild1-0ubuntu1",
      "fix": "thunderbird-gnome-support 1:52.7.0\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-gnome-support-1-52.7.0-build1-0ubuntu1",
      "released": "2018-03-15T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.7.0\u002Bbuild1-0ubuntu1",
      "fix": "thunderbird-mozsymbols 1:52.7.0\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-mozsymbols-1-52.7.0-build1-0ubuntu1",
      "released": "2018-03-15T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.7.0\u002Bbuild1-0ubuntu1",
      "fix": "thunderbird-testsuite 1:52.7.0\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-testsuite-1-52.7.0-build1-0ubuntu1",
      "released": "2018-03-15T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-calendar-timezones",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.7.0\u002Bbuild1-0ubuntu1",
      "fix": "xul-ext-calendar-timezones 1:52.7.0\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-calendar-timezones-1-52.7.0-build1-0ubuntu1",
      "released": "2018-03-15T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-gdata-provider",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.7.0\u002Bbuild1-0ubuntu1",
      "fix": "xul-ext-gdata-provider 1:52.7.0\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-gdata-provider-1-52.7.0-build1-0ubuntu1",
      "released": "2018-03-15T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-lightning",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.7.0\u002Bbuild1-0ubuntu1",
      "fix": "xul-ext-lightning 1:52.7.0\u002Bbuild1-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-lightning-1-52.7.0-build1-0ubuntu1",
      "released": "2018-03-15T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T06:34:28Z"
}