{
  "fix": "thunderbird 1:52.4.0\u002Bbuild1-0ubuntu2",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-1-52.4.0-build1-0ubuntu2",
  "summary": "thunderbird 1:52.4.0\u002Bbuild1-0ubuntu2, released October 1, 2017, fixes 22 CVEs in thunderbird. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "thunderbird 1:52.4.0\u002Bbuild1-0ubuntu2 for Ubuntu 18.04.6 LTS (bionic)",
  "released": "2017-10-01T17:00:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 22 CVEs, none high severity",
  "supported": false,
  "cveCount": 22,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.04051,
  "appliesTo": [
    {
      "product": "thunderbird",
      "productUrl": "https://patchblox.com/security/product/linux/thunderbird",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:52.4.0\u002Bbuild1-0ubuntu2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2017-7785",
      "url": "https://patchblox.com/security/cve/CVE-2017-7785",
      "title": "thunderbird: A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.04051,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7786",
      "url": "https://patchblox.com/security/cve/CVE-2017-7786",
      "title": "thunderbird: A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.04051,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7824",
      "url": "https://patchblox.com/security/cve/CVE-2017-7824",
      "title": "firefox: A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7784",
      "url": "https://patchblox.com/security/cve/CVE-2017-7784",
      "title": "thunderbird: A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observe...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.035,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7818",
      "url": "https://patchblox.com/security/cve/CVE-2017-7818",
      "title": "firefox: A use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet Applications (ARIA) ele...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03309,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7819",
      "url": "https://patchblox.com/security/cve/CVE-2017-7819",
      "title": "firefox: A use-after-free vulnerability can occur in design mode when image objects are resized if objects referenced during t...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03309,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7792",
      "url": "https://patchblox.com/security/cve/CVE-2017-7792",
      "title": "thunderbird: A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremel...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7753",
      "url": "https://patchblox.com/security/cve/CVE-2017-7753",
      "title": "thunderbird: An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style data",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.03082,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7805",
      "url": "https://patchblox.com/security/cve/CVE-2017-7805",
      "title": "firefox: During TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.0305,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7800",
      "url": "https://patchblox.com/security/cve/CVE-2017-7800",
      "title": "thunderbird: A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the dis...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02937,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7810",
      "url": "https://patchblox.com/security/cve/CVE-2017-7810",
      "title": "firefox: Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02797,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7779",
      "url": "https://patchblox.com/security/cve/CVE-2017-7779",
      "title": "thunderbird: Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02694,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7802",
      "url": "https://patchblox.com/security/cve/CVE-2017-7802",
      "title": "thunderbird: A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02622,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7801",
      "url": "https://patchblox.com/security/cve/CVE-2017-7801",
      "title": "thunderbird: A use-after-free vulnerability can occur while re-computing layout for a \u0022marquee\u0022 element during window resizing whe...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02589,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7809",
      "url": "https://patchblox.com/security/cve/CVE-2017-7809",
      "title": "thunderbird: A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while s...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02589,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7787",
      "url": "https://patchblox.com/security/cve/CVE-2017-7787",
      "title": "thunderbird: Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the ifram...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02298,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7793",
      "url": "https://patchblox.com/security/cve/CVE-2017-7793",
      "title": "firefox: A use-after-free vulnerability can occur in the Fetch API when the worker or the associated window are freed when sti...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02267,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7807",
      "url": "https://patchblox.com/security/cve/CVE-2017-7807",
      "title": "thunderbird: A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.02066,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7803",
      "url": "https://patchblox.com/security/cve/CVE-2017-7803",
      "title": "thunderbird: When a page\u0027s content security policy (CSP) header contains a \u0022sandbox\u0022 directive, other directives are ignored",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01964,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7791",
      "url": "https://patchblox.com/security/cve/CVE-2017-7791",
      "title": "thunderbird: On pages containing an iframe, the \u0022data:\u0022 protocol can be used to create a modal alert that will render over arbitra...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7823",
      "url": "https://patchblox.com/security/cve/CVE-2017-7823",
      "title": "firefox: The content security policy (CSP) \u0022sandbox\u0022 directive did not create a unique origin for the document, causing it to...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01439,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2017-7814",
      "url": "https://patchblox.com/security/cve/CVE-2017-7814",
      "title": "firefox: File downloads encoded with \u0022blob:\u0022 and \u0022data:\u0022 URL elements bypassed normal file download checks though the Phishing...",
      "priority": "Routine",
      "severity": "Medium",
      "epss": 0.01191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-12T01:51:14Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}