RHSA-2017:2534: CVEs fixed (Red Hat)
RHSA-2017:2534 fixes 8 tracked CVEs. Affected systems and fixed versions.
- CVE-2017-7809 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal
- CVE-2017-7802 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element
- CVE-2017-7801 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resiz
- CVE-2017-7800 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before
- CVE-2017-7792 CRITICAL 9.8 MITIGATE MITIGATE A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an e
- CVE-2017-7786 CRITICAL 9.8 MITIGATE MITIGATE A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements
- CVE-2017-7785 CRITICAL 9.8 MITIGATE MITIGATE A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within t
- CVE-2017-7784 CRITICAL 9.8 MITIGATE MITIGATE A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the
Applies to
- RHEL 6 · fixed in thunderbird-52.3.0-1.el6_9
- RHEL 7 · fixed in thunderbird-52.3.0-1.el7_4