Lucene search

K
ubuntuUbuntuUSN-4701-1
HistoryJan 20, 2021 - 12:00 a.m.

Thunderbird vulnerabilities

2021-01-2000:00:00
ubuntu.com
119

8.8 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

Releases

  • Ubuntu 20.10

Packages

  • thunderbird - Mozilla Open Source mail and newsgroup client

Details

Multiple security issues were discovered in Thunderbird. If a user were
tricked in to opening a specially crafted website in a browsing context,
an attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, bypass the CSS sanitizer, or execute
arbitrary code. (CVE-2020-16042, CVE-2020-16044, CVE-2020-26971,
CVE-2020-26973, CVE-2020-26974, CVE-2020-26978, CVE-2020-35113)

It was discovered that the proxy.onRequest API did not catch
view-source URLs. If a user were tricked in to installing an
extension with the proxy permission and opening View Source, an
attacker could potentially exploit this to obtain sensitive
information. (CVE-2020-35111)

A stack overflow was discovered due to incorrect parsing of SMTP server
response codes. An attacker could potentially exploit this to execute
arbitrary code. (CVE-2020-26970)

OSVersionArchitecturePackageVersionFilename
Ubuntu20.10noarchthunderbird< 1:78.6.1+build1-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchthunderbird-dbg< 1:78.6.1+build1-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchthunderbird-dev< 1:78.6.1+build1-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchthunderbird-gnome-support< 1:78.6.1+build1-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchthunderbird-gnome-support-dbg< 1:78.6.1+build1-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchthunderbird-locale-af< 1:78.6.1+build1-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchthunderbird-locale-ar< 1:78.6.1+build1-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchthunderbird-locale-ast< 1:78.6.1+build1-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchthunderbird-locale-be< 1:78.6.1+build1-0ubuntu0.20.10.1UNKNOWN
Ubuntu20.10noarchthunderbird-locale-bg< 1:78.6.1+build1-0ubuntu0.20.10.1UNKNOWN
Rows per page:
1-10 of 901