Lucene search

K
mageiaGentoo FoundationMGASA-2024-0191
HistoryMay 22, 2024 - 2:38 a.m.

Updated thunderbird packages fix security vulnerabilities

2024-05-2202:38:02
Gentoo Foundation
advisories.mageia.org
15
thunderbird
security vulnerabilities
javascript execution
pdf.js
indexeddb
clickjacking
cross-origin
use-after-free
memory safety bugs
cve-2024-4367
cve-2024-4767
cve-2024-4768
cve-2024-4769
cve-2024-4770
cve-2024-4777
firefox
esr.

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.4%

Arbitrary JavaScript execution in PDF.js. (CVE-2024-4367) IndexedDB files retained in private browsing mode. (CVE-2024-4767) Potential permissions request bypass via clickjacking. (CVE-2024-4768) Cross-origin responses could be distinguished between script and non-script content-types. (CVE-2024-4769) Use-after-free could occur when printing to PDF. (CVE-2024-4770) Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. (CVE-2024-4777)