MiracleLinux 4 : thunderbird-78.5.1-1.AXS4 (AXSA:2020-1010:11)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-1010:11 advisory. Mozilla: Stack overflow due to incorrect parsing of SMTP server response codes CVE-2020-26970 Tenable has extracted the preceding description block directly...

CVE-2020-26970

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable. This vulnerability affects Thunderbird...