CVE-2018-5162
Fixed in a distro release EPSS 2%
Plaintext of decrypted emails can leak through the src attribute of remote images, or links. This vulnerability affects Thunderbird ESR < 52.8 and Thunderbird < 52.8.
Products: mozilla thunderbird_esr, mozilla thunderbird
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2 | thunderbird | 52.8.0-1.amzn2 |
| Arch Linux | thunderbird | 52.8.0-1 |
| Debian 12 | thunderbird | 1:52.8.0-1 |
| Debian 13 | thunderbird | 1:52.8.0-1 |
| Debian 14 | thunderbird | 1:52.8.0-1 |
| Debian 7 | thunderbird | 1:52.8.0-1~deb7u1 |
| Debian 8 | thunderbird | 1:52.8.0-1~deb8u1 |
| Debian 9 | thunderbird | 1:52.8.0-1~deb9u1 |
| Red Hat Enterprise Linux 6 | thunderbird | 0:52.8.0-2.el6_9 |
| Red Hat Enterprise Linux 6 | thunderbird-debuginfo | 0:52.8.0-2.el6_9 |
| Red Hat Enterprise Linux 7 | thunderbird | 0:52.8.0-1.el7_5 |
| Red Hat Enterprise Linux 7 | thunderbird-debuginfo | 0:52.8.0-1.el7_5 |
| Ubuntu 14.04 LTS | thunderbird | 1:52.8.0+build1-0ubuntu0.14.04.1 |
| Ubuntu 16.04 LTS | thunderbird | 1:52.8.0+build1-0ubuntu0.16.04.1 |
| Ubuntu 18.04 LTS | thunderbird | 1:52.8.0+build1-0ubuntu0.18.04.1 |
| openSUSE Tumbleweed | MozillaThunderbird | 91.1.1-1.1 |