Lucene search

K
mageiaGentoo FoundationMGASA-2024-0231
HistoryJun 22, 2024 - 8:32 p.m.

Updated thunderbird packages fix security vulnerabilities

2024-06-2220:32:46
Gentoo Foundation
advisories.mageia.org
15
thunderbird
security vulnerabilities
use-after-free
memory corruption
sandbox bypass
networking
javascript
external protocol handlers
offscreen canvas
memory safety bugs
unix

7.8 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

Use-after-free in networking. (CVE-2024-5702) Use-after-free in JavaScript object transplant. (CVE-2024-5688) External protocol handlers leaked by timing attack. (CVE-2024-5690) Sandboxed iframes were able to bypass sandbox restrictions to open a new window. (CVE-2024-5691) Cross-Origin Image leak via Offscreen Canvas. (CVE-2024-5693) Memory Corruption in Text Fragments. (CVE-2024-5696) Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. (CVE-2024-5700)