| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 52.0< 45.9.0< 53.0 | 45.9.053.0 |
| thunderbird | < 52.1.0 | 52.1.0 |
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free