ROS-20221118-05

A vulnerability in Mozilla Thunderbird email client is related to a memory usage error after a
release in the InputStream implementation. Exploitation of the vulnerability could allow an attacker acting
remotely, cause a victim to visit a specially crafted website, trigger a post-release usage error, and execute arbitrary code on the system.
release and execute arbitrary code on the system

A vulnerability in the Mozilla Thunderbird email client is related to a bug in Service Workers. Exploitation
of the vulnerability could allow an attacker acting remotely to obtain information about the presence or length of a
of a media file, using media timing information from different sources combined with queries of the
range

A vulnerability in the Mozilla Thunderbird email client involves incorrect handling of a series of calls to popup and
window.print(). Exploitation of the vulnerability could allow an attacker acting remotely to force the
the browser into full screen mode without the user seeing the notification prompt, which could lead to user confusion or
could lead to user confusion or spoofing attacks