RHSA-2017:1201: CVEs fixed (Red Hat)

RHSA-2017:1201 fixes 12 tracked CVEs. Affected systems and fixed versions.

• CVE-2017-5465 CRITICAL 9.1 MITIGATE MITIGATE An out-of-bounds read while processing SVG content in "ConvolvePixel"
• CVE-2017-5460 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and k
• CVE-2017-5459 CRITICAL 9.8 MITIGATE MITIGATE A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash
• CVE-2017-5447 CRITICAL 9.1 MITIGATE MITIGATE An out-of-bounds read during the processing of glyph widths during text layout
• CVE-2017-5446 CRITICAL 9.8 MITIGATE MITIGATE An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content
• CVE-2017-5443 CRITICAL 9.8 MITIGATE MITIGATE An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives
• CVE-2017-5441 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability when holding a selection during scroll events
• CVE-2017-5440 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during ma
• CVE-2017-5439 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability during XSLT processing due to poor handling of template parameters
• CVE-2017-5438 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler
• CVE-2017-5434 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitab
• CVE-2017-5433 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an ar

Applies to

• RHEL 6 · fixed in thunderbird-52.1.0-1.el6_9
• RHEL 7 · fixed in thunderbird-52.1.0-1.el7_3

← Back to latest CVEs