Remote Yes

Type Arbitrary code execution

Description

A buffer overflow can occur in Thunderbird < 52.7.0 when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash.

AVG-663 thunderbird 52.6.0-2 52.7.0-1 Critical Fixed

24 Mar 2018 ASA-201803-22 AVG-663 thunderbird Critical multiple issues

https://www.mozilla.org/en-US/security/advisories/mfsa2018-09/#CVE-2018-5127
https://bugzilla.mozilla.org/show_bug.cgi?id=1430557