Lucene search
UbuntuUSN-6782-1HistoryMay 22, 2024 - 12:00 a.m.
Thunderbird vulnerabilities
2024-05-2200:00:00
ubuntu.com
7
thunderbird
ubuntu
security issues
denial of service
sensitive information
bypass security restrictions
cross-site tracing
arbitrary code
pdf.js
font styles
Releases
- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- thunderbird - Mozilla Open Source mail and newsgroup client
Details
Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, bypass security restrictions, cross-site
tracing, or execute arbitrary code. (CVE-2024-4767, CVE-2024-4768,
CVE-2024-4769, CVE-2024-4777)
Thomas Rinsma discovered that Thunderbird did not properly handle type check
when handling fonts in PDF.js. An attacker could potentially exploit this
issue to execute arbitrary javascript code in PDF.js. (CVE-2024-4367)
Irvan Kurniawan discovered that Thunderbird did not properly handle certain
font styles when saving a page to PDF. An attacker could potentially
exploit this issue to cause a denial of service. (CVE-2024-4770)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.10 | noarch | thunderbird | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-dbg | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-dev | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-gnome-support | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-gnome-support-dbg | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-locale-af | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-locale-ar | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-locale-ast | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-locale-be | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-locale-bg | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
Related
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 115.11 — Mozilla
2024-05-14 00:00:00
Security Vulnerabilities fixed in Thunderbird 115.11 — Mozilla
2024-05-15 00:00:00
Security Vulnerabilities fixed in Firefox 126 — Mozilla
2024-05-14 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2024-135-01)
2024-05-15 00:00:00
Mozilla Firefox ESR Security Update (mfsa_2024-22) - Mac OS X
2024-05-17 00:00:00
Mozilla Thunderbird Security Update (mfsa_2024-23) - Windows
2024-05-17 00:00:00
redhat
redhat
(RHSA-2024:2886) Important: firefox security update
2024-05-16 11:24:44
(RHSA-2024:2885) Important: firefox security update
2024-05-16 11:24:38
(RHSA-2024:2905) Important: thunderbird security update
2024-05-20 01:02:21
debian
debian
[SECURITY] [DLA 3815-1] firefox-esr security update
2024-05-16 07:16:17
[SECURITY] [DSA 5693-1] thunderbird security update
2024-05-17 17:04:52
[SECURITY] [DSA 5691-1] firefox-esr security update
2024-05-15 17:48:47
osv
osv
thunderbird - security update
2024-05-17 00:00:00
Important: thunderbird security update
2024-05-16 00:00:00
thunderbird vulnerabilities
2024-05-22 05:06:43
nessus
nessus
CentOS 7 : firefox (RHSA-2024:2881)
2024-05-16 00:00:00
RHEL 8 : firefox (RHSA-2024:2886)
2024-05-16 00:00:00
RHEL 8 : firefox (RHSA-2024:2885)
2024-05-16 00:00:00
mageia
mageia
Updated nss & firefox packages fix security vulnerabilities
2024-05-22 02:17:20
Updated thunderbird packages fix security vulnerabilities
2024-05-22 02:38:02
rocky
rocky
thunderbird security update
2024-06-14 14:00:40
kaspersky
kaspersky
KLA67450 Multiple vulnerabilities in Mozilla Thunderbird
2024-05-15 00:00:00
KLA67587 Multiple vulnerabilities in Mozilla Firefox ESR
2024-05-14 00:00:00
KLA67588 Multiple vulnerabilities in Mozilla Firefox
2024-05-14 00:00:00
oraclelinux
oraclelinux
firefox security update
2024-05-16 00:00:00
thunderbird security update
2024-05-20 00:00:00
thunderbird security update
2024-06-11 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2024-06-12 21:36:48
[slackware-security] mozilla-firefox
2024-05-14 19:27:14
almalinux
almalinux
Moderate: thunderbird security update
2024-06-10 00:00:00
Important: thunderbird security update
2024-05-16 00:00:00
Moderate: firefox security update
2024-06-10 00:00:00
amazon
amazon
Important: thunderbird
2024-06-06 20:17:00
ubuntu
ubuntu
Firefox vulnerabilities
2024-05-21 00:00:00
Firefox regressions
2024-05-29 00:00:00
redhatcve
redhatcve
cvelist
cvelist
ubuntucve
ubuntucve
github
github
Arbitrary JavaScript execution due to using outdated libraries
2024-06-05 14:15:50
nvd
nvd
cve
cve
vulnrichment
vulnrichment
veracode
veracode
Remote Code Execution (RCE)
2024-05-08 04:43:35
Permission Issues
2024-05-20 12:36:39
Information Exposure
2024-05-20 12:38:49
githubexploit
githubexploit
Exploit for CVE-2024-4367
2024-05-20 10:02:23
Exploit for CVE-2024-4367
2024-05-20 22:56:10
Exploit for CVE-2024-4367
2024-05-22 18:05:47
debiancve
debiancve
wpvulndb
wpvulndb
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
2024-06-03 00:00:00
alpinelinux
alpinelinux
CVE-2024-4767
2024-05-14 18:15:13
thn
thn
freebsd
freebsd
Gitlab -- Vulnerabilities
2024-05-22 00:00:00
wordfence
wordfence