Multiple serious vulnerabilities have been found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface and execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Multiple use-after-free vulnerabilities can be explotied remotely to cause denial of service;
2. An unspecified vulnerability in the addressbar can be exploited remotely via specially crafted URL to spoof user interface;
3. Multiple memory corruption vulnerabilities can be exploited remotely to execute arbitrary code;

Mozilla Thunderbird earlier than 52.6

Update to the latest version
Download Mozilla Thunderbird

Mozilla Foundation Security Advisory 2018-04