vulnerability

MFSA2017-13 Thunderbird: Security vulnerabilities fixed in Thunderbird 52.1 (CVE-2017-5464)

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Apr 30, 2017
Added
May 2, 2017
Modified
Mar 27, 2026

Description

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

Solution

mozilla-thunderbird-upgrade-52_1
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.