4555 matches found
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
Mozilla Thunderbird Security Advisories (MFSA2019-13, MFSA2019-15) - Windows
Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...
Mozilla Thunderbird Security Advisories (MFSA2019-13, MFSA2019-15) - Mac OS X
Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...
[SECURITY] Fedora 30 Update: thunderbird-60.7.0-1.fc30
Mozilla Thunderbird is a standalone mail and newsgroup client...
Mozilla Thunderbird < 60.7
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 60.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-15 advisory. - A use-after-free vulnerability can occur in the chrome event handler when it is freed while still in use...
KLA11488 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A type confusion...
Use-after-free
Mozilla Thunderbird is vulnerable to use-after-free vulnerability. The attack exists because of use-after-free with SMIL animation controller...
Buffer Overflow
Mozilla Thunderbird is vulnerable to buffer overflow. It does not use correct alias information in IonMonkey JIT compiler for MArraySlice in Array.prototype.slice method...
Denial Of Service (DoS)
Mozilla Thunderbird is vulnerable to denial of service DoS. The attack is due to type-confusion in IonMonkey JIT compiler...
Bound Check Bypass
Mozilla Thunderbird is vulnerable to bound check bypass. It does not properly perform bounds checking when Spectre mitigations are disabled...
Denial Of Service (DoS)
Mozilla Thunderbird is vulnerable to information leakage due to IonMonkey leaks JSOPTIMIZEDOUT magic value to script...
Type Confusion
Mozilla Thunderbird is vulnerable to type confusion due to wrong type inferencing for constructors entered through on-stack replacement with IonMonkey...
Denial Of Sevice (DoS)
Mozilla Thunderbird is vulnerable to denial of sevice DoS due to use-after-free when removing in-use DOM elements...
Unauthorised Access
Mozilla Thunderbird is vulnerable to unauthorised access. Proxy Auto-Configuration file can define localhost access to be proxied...
Arbitrary Code Execution
Mozilla Thunderbird is vulnerable to arbitrary code execution. A type confusion due to memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6 allows an attacker to execute arbitrary code in the host OS...
Weak Encryption
Mozilla Thunderbird is vulnerable to weak encryption attacks. This is because dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag could leak plaintext when included in a HTML reply/forward which may leads to disclosure of sensitive information...
Information Disclosure
Mozilla Thunderbird is vulnerable to information disclosure vulnerability. An attacker could submit an embedded form and leak the plaintext of decrypted emails by persuading a victim to visit a specially crafted Web site...
Weak Encryption
Mozilla Thunderbird is vulnerable to weak encryption vulnerability. This exists in the Decrypted S/MIME parts. An attacker could leak plaintext by submitting an embedded form when included in a HTML reply/forward which may leads to disclosure of sensitive information...