libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbirdUpgrade thunderbird-debuginfo | Feb 12, 2019 | Jan 27, 2017 |
| Debian | — | Upgrade thunderbirdUpgrade libical | May 28, 2017 | Jan 27, 2017 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin.Upgrade dev-libs/libical.Upgrade mail-client/thunderbird.Upgrade www-client/firefox. | Apr 3, 2019 | Jan 27, 2017 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 60.5 | Jan 30, 2019 | Jan 27, 2017 |
| Oracle Solaris | — | Upgrade web/data/firefox-bookmarks to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/libical to version 0.46-0.175.3.23.0.1.0 on Solaris 11.3Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4Upgrade web/browser/firefox to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade mail/thunderbird to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4 | Aug 21, 2017 | Jan 27, 2017 |
| Oracle_linux | — | Upgrade thunderbird | Feb 5, 2019 | May 24, 2016 |
| Redhat_linux | — | Upgrade thunderbird-debuginfoUpgrade thunderbirdNo solution exists | Feb 5, 2019 | Jan 27, 2017 |
| Suse | — | Upgrade libical3Upgrade typelib-1_0-ICalGLib-3_0Upgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade libical1-32bitUpgrade libical-devel-staticUpgrade MozillaThunderbird-buildsymbolsUpgrade libical-develUpgrade libical2Upgrade typelib-1_0-ICal-3_0Upgrade libical1Upgrade libical-glib-develUpgrade libical0-32bitUpgrade libical-glib3Upgrade libical0 | Jul 28, 2017 | Jan 27, 2017 |
| Ubuntu | — | Upgrade thunderbird | Mar 7, 2019 | Jan 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub