CVE-2017-5472 Mozilla Thunderbird Multiple Vulnerabilities (mfsa2017-17)

Mozilla Thunderbird is a free, open source, cross-platform email, news, RSS, and chat client.

Multiple vulnerabilities were reported in Mozilla Thunderbird. The critical vulnerabilities can be used by remote attackers to cause Denial of Service or execute arbitrary code.

Affected Versions:
Mozilla Thunderbird prior to 52.2

QID Detection Logic (Authenticated):
The QID checks for the vulnerable version of thunderbird.exe. The path of the file is determined by the registry key "HKLM\SOFTWARE\Mozilla\Mozilla Thunderbird" value "PathToExe:.

Successful exploitation of the vulnerability will lead to denial of service or execution of arbitrary code.

Vendor has released fix(52.2). Download updated Thunderbird from here.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

mfsa2017-17