MiracleLinux 4 : thunderbird-60.7.2-2.AXS4 (AXSA:2019-3916:03)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3916:03 advisory. Mozilla: Type confusion in Array.pop CVE-2019-11707 thunderbird: Stack buffer overflow in icalrecuraddbydayrules in icalrecur.c CVE-2019-11705...

OSV-2025-890 Heap-buffer-overflow in icalmemory_tmp_copy

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=458943970 Crash type: Heap-buffer-overflow WRITE 1 Crash state: icalmemorytmpcopy icalreqstattypefromstring icalvaluenewfromstring...

PT-2025-47546

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=458943970 Crash type: Heap-buffer-overflow WRITE 1 Crash state: icalmemory tmp copy icalreqstattype from string icalvalue new from string...

PT-2024-40793

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves several functions: icalmemory strdup, icalparameter new from...

PT-2019-3411

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 60.7.1 Description The issue is related to a heap buffer overflow in the icalmemory strdup and dequote function when processing certain email messages, potentially leading to a crash. This could allow a remote...