127 matches found
RHEL 6 : thunderbird (RHSA-2019:1624)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1624 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.7.2. Security Fixes: Mozilla:...
libical: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c
A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezonegetvtimezoneproperties when processing certain email messages, resulting in a crash. This vulnerability affects Thunderbird 60.7.1...
Thunderbird ESR < 60.7.XXX - Type Confusion Vulnerability
Type confusion in Thunderbird ============================= Severity Rating: Medium Confirmed Affected Versions: All versions affected Confirmed Patched Versions: Thunderbird ESR 60.7.XXX Vendor: Thunderbird Vendor URL: https://www.thunderbird.net/ Vendor Reference:...
Thunderbird ESR < 60.7.XXX - parser_get_next_char Heap-Based Buffer Overflow Vulnerability
Heap-based buffer overflow in Thunderbird ========================================= Severity Rating: High Confirmed Affected Versions: All versions affected Confirmed Patched Versions: Thunderbird ESR 60.7.XXX Vendor: Thunderbird Vendor URL: https://www.thunderbird.net/ Vendor Reference:...
Thunderbird ESR 60.7.XXX - parser_get_next_char Heap-Based Buffer Overflow
Thunderbird ESR 60.7.XXX - parsergetnextchar Heap-Based Buffer Overflow X41 D-Sec GmbH Security Advisory: X41-2019-002 Heap-based buffer overflow in Thunderbird ========================================= Severity Rating: High Confirmed Affected Versions: All versions affected Confirmed Patched...
libical/libical_fuzzer: Use-of-uninitialized-value in icalcomponent_free
Detailed report: https://oss-fuzz.com/testcase?key=5758289456922624 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: icalcomponentfree icalparserfr...
libical/libical_fuzzer: Use-of-uninitialized-value in pvl_pop
Detailed report: https://oss-fuzz.com/testcase?key=5739308486492160 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pvlpop icalcomponentfree...
libical/libical_fuzzer: Use-of-uninitialized-value in parser_get_next_char
Project: https://github.com/libical/libical.git Detailed report: https://oss-fuzz.com/testcase?key=5695048311635968 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
libical/libical_fuzzer: Use-of-uninitialized-value in icalcomponent_remove_component
Project: https://github.com/libical/libical.git Detailed report: https://oss-fuzz.com/testcase?key=5677236176289792 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
libical/libical_fuzzer: Heap-use-after-free in icalparameter_new_from_value_string
Project: https://github.com/libical/libical.git Detailed report: https://oss-fuzz.com/testcase?key=5753503722504192 Project: libical Fuzzer: libFuzzerlibicalfuzzer Fuzz target binary: libicalfuzzer Job Type: libfuzzerasanlibical Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...
Libical: Multiple vulnerabilities
Background An Open Source implementation of the iCalendar protocols and protocol data units. Description Multiple vulnerabilities have been discovered in Libical. Please review the referenced CVE identifiers for details. Impact Please review the referenced CVE identifiers for details. Workaround...
GLSA-201904-02 : Libical: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201904-02 Libical: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Libical. Please review the referenced CVE identifiers for details. Impact : Please review the referenced CVE identifiers for details...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Thunderbird vulnerabilities (USN-3897-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3897-1 advisory. A use-after-free was discovered in libical. If a user were tricked in to opening a specially crafted ICS calendar file, an attack...
USN-3897-1: Thunderbird vulnerabilities
A use-after-free was discovered in libical. If a user were tricked in to opening a specially crafted ICS calendar file, an attacker could potentially exploit this to cause a denial of service. CVE-2016-5824 Multiple security issues were discovered in Thunderbird. If a user were tricked in to...
USN-3897-1 thunderbird vulnerabilities
A use-after-free was discovered in libical. If a user were tricked in to opening a specially crafted ICS calendar file, an attacker could potentially exploit this to cause a denial of service. CVE-2016-5824 Multiple security issues were discovered in Thunderbird. If a user were tricked in to...
thunderbird security update
CentOS Errata and Security Advisory CESA-2019:0269 An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
RHEL 6 : thunderbird (RHSA-2019:0269)
The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:0269 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.5.0. Security Fixes: Mozilla:...
RHEL 7 : thunderbird (RHSA-2019:0270)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:0270 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 60.5.0. Security Fixes: Mozilla:...
Important: Red Hat Security Advisory: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...