libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade thunderbird-debuginfoUpgrade thunderbird | Feb 12, 2019 | Jan 27, 2017 |
| Debian | — | Upgrade libicalUpgrade thunderbird | May 28, 2017 | Jan 27, 2017 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade dev-libs/libical.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin. | Apr 3, 2019 | Jan 27, 2017 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 60.5 | Jan 30, 2019 | Jan 27, 2017 |
| Oracle Solaris | — | Upgrade web/data/firefox-bookmarks to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade library/libical to version 0.46-0.175.3.23.0.1.0 on Solaris 11.3Upgrade web/browser/firefox to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4Upgrade mail/thunderbird to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4 | Aug 21, 2017 | Jan 27, 2017 |
| Oracle_linux | — | Upgrade thunderbird | Feb 5, 2019 | May 24, 2016 |
| Redhat_linux | — | Upgrade thunderbirdUpgrade thunderbird-debuginfoNo solution exists | Feb 5, 2019 | Jan 27, 2017 |
| Suse | — | Upgrade libical-glib-develUpgrade libical2Upgrade libical-develUpgrade libical-glib3Upgrade typelib-1_0-ICal-3_0Upgrade libical1Upgrade libical0Upgrade MozillaThunderbird-buildsymbolsUpgrade libical0-32bitUpgrade libical3Upgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-otherUpgrade typelib-1_0-ICalGLib-3_0Upgrade libical1-32bitUpgrade MozillaThunderbirdUpgrade libical-devel-static | Jul 28, 2017 | Jan 27, 2017 |
| Ubuntu | — | Upgrade thunderbird | Mar 7, 2019 | Jan 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub