The remote Redhat Enterprise Linux 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:0061 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 52.5.2.

    Security Fix(es):

    * Multiple flaws were found in the processing of malformed web content. A web page containing malicious     content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of     the user running Thunderbird. (CVE-2017-7846, CVE-2017-7847, CVE-2017-7848, CVE-2017-7829)

    Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges cure53     and Sabri Haddouche as the original reporters.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-2506:01 advisory.

    * Multiple flaws were found in the processing of malformed web content. A web page containing malicious     content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of     the user running Thunderbird. (CVE-2017-7846, CVE-2017-7847, CVE-2017-7848, CVE-2017-7829)     Asianux would like to thank the Mozilla project for reporting these issues. Upstream acknowledges cure53     and Sabri Haddouche as the original reporters.
    CVE-2017-7829
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7846
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7847
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7848
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 52.5.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-30 advisory.

  - It is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website, e.g. via     View -> Feed article -> Website or in the standard format of View -> Feed article -> default     format. (CVE-2017-7846)

  - A buffer overflow occurs when drawing and validating elements using Direct 3D 9 with the ANGLE graphics     library, used for WebGL content. This is due to an incorrect value being passed within the library during     checks and results in a potentially exploitable crash.  Note: This attack only affects Windows operating     systems. Other operating systems are unaffected. (CVE-2017-7845)

  - Crafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name.
    (CVE-2017-7847)

  - RSS fields can inject new lines into the created email structure, modifying the message body.
    (CVE-2017-7848)

  - It is possible to spoof the sender's email address and display an arbitrary sender address to the email     recipient. The real sender's address is not displayed if preceded by a null character in the display     string. (CVE-2017-7829)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - It is possible to spoof the sender's email address and     display an arbitrary sender address to the email     recipient. The real sender's address is not displayed if     preceded by a null character in the display string. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7829)

  - Crafted CSS in an RSS feed can leak and reveal local     path strings, which may contain user name. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7847)

  - RSS fields can inject new lines into the created email     structure, modifying the message body. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7848)

  - It is possible to execute JavaScript in the parsed RSS     feed when RSS feed is viewed as a website, e.g. via     View -> Feed article -> Website or in the standard     format of View -> Feed article -> default format. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7846)

  - Memory safety bugs were reported in Firefox 57 and     Firefox ESR 52.5. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     that some of these could be exploited to run arbitrary     code. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5089)

  - An integer overflow vulnerability in the Skia library     when allocating memory for edge builders on some systems     with at least 8 GB of RAM. This results in the use of     uninitialized memory, resulting in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5095)

  - A use-after-free vulnerability can occur while editing     events in form elements on a page, resulting in a     potentially exploitable crash. This vulnerability     affects Firefox ESR < 52.6 and Thunderbird < 52.6.
    (CVE-2018-5096)

  - A use-after-free vulnerability can occur during XSL     transformations when the source document for the     transformation is manipulated by script content during     the transformation. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5097)

  - A use-after-free vulnerability can occur when form input     elements, focus, and selections are manipulated by     script content. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5098)

  - A use-after-free vulnerability can occur when the widget     listener is holding strong references to browser objects     that have previously been freed, resulting in a     potentially exploitable crash when these references are     used. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5099)

  - A use-after-free vulnerability can occur when     manipulating HTML media elements with media streams,     resulting in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.6, Firefox ESR <     52.6, and Firefox < 58. (CVE-2018-5102)

  - A use-after-free vulnerability can occur during mouse     event handling due to issues with multiprocess support.
    This results in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.6, Firefox ESR <     52.6, and Firefox < 58. (CVE-2018-5103)

  - A use-after-free vulnerability can occur during font     face manipulation when a font face is freed while still     in use, resulting in a potentially exploitable crash.
    This vulnerability affects Thunderbird < 52.6, Firefox     ESR < 52.6, and Firefox < 58. (CVE-2018-5104)

  - If right-to-left text is used in the addressbar with     left-to-right alignment, it is possible in some     circumstances to scroll this text to spoof the displayed     URL. This issue could result in the wrong URL being     displayed as a location, which can mislead users to     believe they are on a different site than the one     loaded. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5117)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
105646	RHEL 6 / 7 : thunderbird (RHSA-2018:0061)	Nessus	Red Hat Local Security Checks	2018/1/8	2025/11/10	high
289353	MiracleLinux 4 : thunderbird-52.5.2-1.AXS4 (AXSA:2018-2506:01)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	high
105507	Mozilla Thunderbird < 52.5.2	Nessus	Windows	2018/1/2	2025/11/18	high
127156	NewStart CGSL MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0009)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2024/5/8	critical

検出

プラグインの検索

high

high

high

critical