Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-03056
HistoryJan 06, 2023 - 12:00 a.m.

Mozilla Thunderbird Resource Management Error Vulnerability (CNVD-2023-03056)

2023-01-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
26

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Mozilla Thunderbird is a set of email client software from the Mozilla Foundation that is separate from the Mozilla Application Suite. Mozilla Thunderbird is vulnerable to a resource management error, which results from a memory use-after-free issue. A remote attacker could exploit this vulnerability to cause a denial of service (disk consumption and mass notification) with a series of requests with malformed parameters.

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H