CVE Database · CVE-2018-5178
CVSS v3.1
N/A
EPSS
5.06%
Published
Jun 11, 2018
Modified
Nov 25, 2025
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data. This vulnerability requires the use of a malicious or vulnerable legacy extension in order to occur. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
Weaknesses (CWE)
Affected Products (20)
References (20)
