A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | alpine-linux-upgrade-firefox-esr | Apr 5, 2018 | Mar 21, 2018 |
| Arch Linux | View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗View advisory ↗ | arch-linux-upgrade-latest | Jul 11, 2025 | Jun 11, 2018 |
| Centos_linux | — | centos-upgrade-firefoxcentos-upgrade-firefox-debuginfocentos-upgrade-thunderbirdcentos-upgrade-thunderbird-debuginfo | Jun 19, 2018 | Mar 29, 2018 |
| Debian | debian-upgrade-firefox-esrdebian-upgrade-thunderbird | Feb 19, 2019 | Jun 11, 2018 | |
| Freebsd | freebsd-upgrade-package-firefoxfreebsd-upgrade-package-waterfoxfreebsd-upgrade-package-seamonkeyfreebsd-upgrade-package-linux-seamonkeyfreebsd-upgrade-package-firefox-esrfreebsd-upgrade-package-linux-firefoxfreebsd-upgrade-package-libxulfreebsd-upgrade-package-thunderbirdfreebsd-upgrade-package-linux-thunderbird | Dec 10, 2025 | Mar 13, 2018 | |
| Gentoo Linux | gentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin | Oct 3, 2018 | Jun 11, 2018 | |
| Mfsa2018 06 | mozilla-firefox-upgrade-59_0 | Jul 12, 2018 | Jun 11, 2018 | |
| Mfsa2018 07 | mozilla-firefox-esr-upgrade-52_7 | Mar 14, 2018 | Mar 13, 2018 | |
| Mozilla Thunderbird | mozilla-thunderbird-upgrade-52_7 | Mar 26, 2018 | Mar 23, 2018 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-mail-thunderbird-52-7-0-0-175-3-31-0-4-0oracle-solaris-11-3-upgrade-mail-thunderbird-plugin-thunderbird-lightning-52-7-0-0-175-3-31-0-4-0oracle-solaris-11-3-upgrade-web-browser-firefox-52-7-3-0-175-3-31-0-4-0oracle-solaris-11-3-upgrade-web-browser-firefox-plugin-firefox-java-52-7-3-0-175-3-31-0-4-0oracle-solaris-11-3-upgrade-web-data-firefox-bookmarks-52-7-3-0-175-3-31-0-4-0 | Apr 18, 2018 | Apr 18, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-firefoxoracle-linux-upgrade-thunderbird | Mar 2, 2020 | Mar 14, 2018 |
| Redhat_linux | — | redhat-upgrade-firefoxredhat-upgrade-firefox-debuginforedhat-upgrade-thunderbirdredhat-upgrade-thunderbird-debuginfo | May 1, 2018 | Mar 29, 2018 |
| Suse | — | suse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translationssuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-buildsymbolssuse-upgrade-mozillathunderbird-develsuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-other | Jun 21, 2018 | Mar 29, 2018 |
| Ubuntu | ubuntu-upgrade-firefoxubuntu-upgrade-thunderbird | Apr 26, 2018 | Mar 29, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub