{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[],"affected_systems_content":"<P>Thunderbird versions ant\u00e9rieures \u00e0 52.1</P>","content":"## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des\ncorrectifs (cf. section Documentation).\n","cves":[{"name":"CVE-2017-5436","url":"https://www.cve.org/CVERecord?id=CVE-2017-5436"},{"name":"CVE-2016-1019","url":"https://www.cve.org/CVERecord?id=CVE-2016-1019"},{"name":"CVE-2017-5440","url":"https://www.cve.org/CVERecord?id=CVE-2017-5440"},{"name":"CVE-2017-5459","url":"https://www.cve.org/CVERecord?id=CVE-2017-5459"},{"name":"CVE-2017-5429","url":"https://www.cve.org/CVERecord?id=CVE-2017-5429"},{"name":"CVE-2017-5467","url":"https://www.cve.org/CVERecord?id=CVE-2017-5467"},{"name":"CVE-2017-5462","url":"https://www.cve.org/CVERecord?id=CVE-2017-5462"},{"name":"CVE-2017-5444","url":"https://www.cve.org/CVERecord?id=CVE-2017-5444"},{"name":"CVE-2017-5451","url":"https://www.cve.org/CVERecord?id=CVE-2017-5451"},{"name":"CVE-2017-5466","url":"https://www.cve.org/CVERecord?id=CVE-2017-5466"},{"name":"CVE-2017-5447","url":"https://www.cve.org/CVERecord?id=CVE-2017-5447"},{"name":"CVE-2017-5469","url":"https://www.cve.org/CVERecord?id=CVE-2017-5469"},{"name":"CVE-2017-5443","url":"https://www.cve.org/CVERecord?id=CVE-2017-5443"},{"name":"CVE-2017-5442","url":"https://www.cve.org/CVERecord?id=CVE-2017-5442"},{"name":"CVE-2017-5432","url":"https://www.cve.org/CVERecord?id=CVE-2017-5432"},{"name":"CVE-2017-5465","url":"https://www.cve.org/CVERecord?id=CVE-2017-5465"},{"name":"CVE-2017-5439","url":"https://www.cve.org/CVERecord?id=CVE-2017-5439"},{"name":"CVE-2017-5441","url":"https://www.cve.org/CVERecord?id=CVE-2017-5441"},{"name":"CVE-2017-5464","url":"https://www.cve.org/CVERecord?id=CVE-2017-5464"},{"name":"CVE-2017-5434","url":"https://www.cve.org/CVERecord?id=CVE-2017-5434"},{"name":"CVE-2017-5430","url":"https://www.cve.org/CVERecord?id=CVE-2017-5430"},{"name":"CVE-2017-5445","url":"https://www.cve.org/CVERecord?id=CVE-2017-5445"},{"name":"CVE-2017-5438","url":"https://www.cve.org/CVERecord?id=CVE-2017-5438"},{"name":"CVE-2017-5460","url":"https://www.cve.org/CVERecord?id=CVE-2017-5460"},{"name":"CVE-2017-5454","url":"https://www.cve.org/CVERecord?id=CVE-2017-5454"},{"name":"CVE-2017-5449","url":"https://www.cve.org/CVERecord?id=CVE-2017-5449"},{"name":"CVE-2017-5435","url":"https://www.cve.org/CVERecord?id=CVE-2017-5435"},{"name":"CVE-2017-5433","url":"https://www.cve.org/CVERecord?id=CVE-2017-5433"},{"name":"CVE-2017-5446","url":"https://www.cve.org/CVERecord?id=CVE-2017-5446"},{"name":"CVE-2017-5461","url":"https://www.cve.org/CVERecord?id=CVE-2017-5461"}],"links":[],"reference":"CERTFR-2017-AVI-134","revisions":[{"description":"version initiale.","revision_date":"2017-05-02T00:00:00.000000"}],"risks":[{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"Injection de code indirecte \u00e0 distance"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans <span\nclass=\"textit\">Mozilla Thunderbird</span>. Certaines d'entre elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance, un d\u00e9ni de service \u00e0 distance et un contournement de la\npolitique de s\u00e9curit\u00e9.\n","title":"Multiples vuln\u00e9rabilit\u00e9s dans Mozilla Thunderbird","vendor_advisories":[{"published_at":null,"title":"Bulletin de s\u00e9curit\u00e9 Mozilla mfsa2017-13 du 30 avril 2017","url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-13/"}]}