Lucene search
UbuntuUSN-6782-1HistoryMay 22, 2024 - 12:00 a.m.
Thunderbird vulnerabilities
2024-05-2200:00:00
ubuntu.com
7
thunderbird
ubuntu
security issues
denial of service
sensitive information
bypass security restrictions
cross-site tracing
arbitrary code
pdf.js
font styles
Releases
- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- thunderbird - Mozilla Open Source mail and newsgroup client
Details
Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, bypass security restrictions, cross-site
tracing, or execute arbitrary code. (CVE-2024-4767, CVE-2024-4768,
CVE-2024-4769, CVE-2024-4777)
Thomas Rinsma discovered that Thunderbird did not properly handle type check
when handling fonts in PDF.js. An attacker could potentially exploit this
issue to execute arbitrary javascript code in PDF.js. (CVE-2024-4367)
Irvan Kurniawan discovered that Thunderbird did not properly handle certain
font styles when saving a page to PDF. An attacker could potentially
exploit this issue to cause a denial of service. (CVE-2024-4770)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.10 | noarch | thunderbird | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-dbg | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-dev | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-gnome-support | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-gnome-support-dbg | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-locale-af | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-locale-ar | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-locale-ast | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-locale-be | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
| Ubuntu | 23.10 | noarch | thunderbird-locale-bg | < 1:115.11.0+build2-0ubuntu0.23.10.1 | UNKNOWN |
Related
debian
debian
[SECURITY] [DLA 3817-1] thunderbird security update
2024-05-20 08:15:13
[SECURITY] [DSA 5693-1] thunderbird security update
2024-05-17 17:04:52
[SECURITY] [DSA 5691-1] firefox-esr security update
2024-05-15 17:48:47
redhat
redhat
(RHSA-2024:2883) Important: firefox security update
2024-05-16 11:24:26
(RHSA-2024:2903) Important: thunderbird security update
2024-05-20 01:02:18
(RHSA-2024:2911) Important: thunderbird security update
2024-05-20 05:48:47
almalinux
almalinux
Important: firefox security update
2024-05-16 00:00:00
Important: thunderbird security update
2024-05-16 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2024-05-22 02:38:02
Updated nss & firefox packages fix security vulnerabilities
2024-05-22 02:17:20
osv
osv
firefox-esr - security update
2024-05-15 00:00:00
Important: thunderbird security update
2024-06-14 14:00:40
thunderbird - security update
2024-05-20 00:00:00
nessus
nessus
RHEL 9 : thunderbird (RHSA-2024:2903)
2024-05-20 00:00:00
RHEL 8 : thunderbird (RHSA-2024:3338)
2024-05-23 00:00:00
RHEL 8 : firefox (RHSA-2024:2882)
2024-05-16 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2024-06-11 00:00:00
thunderbird security update
2024-05-16 00:00:00
firefox security update
2024-05-16 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 115.11 — Mozilla
2024-05-15 00:00:00
Security Vulnerabilities fixed in Firefox ESR 115.11 — Mozilla
2024-05-14 00:00:00
Security Vulnerabilities fixed in Firefox 126 — Mozilla
2024-05-14 00:00:00
openvas
openvas
Mozilla Firefox ESR Security Update (mfsa_2024-22) - Windows
2024-05-17 00:00:00
Debian: Security Advisory (DSA-5693-1)
2024-05-20 00:00:00
Ubuntu: Security Advisory (USN-6782-1)
2024-05-23 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2024-05-14 19:27:14
[slackware-security] mozilla-thunderbird
2024-06-12 21:36:48
amazon
amazon
Important: thunderbird
2024-06-06 20:17:00
kaspersky
kaspersky
KLA67587 Multiple vulnerabilities in Mozilla Firefox ESR
2024-05-14 00:00:00
KLA67450 Multiple vulnerabilities in Mozilla Thunderbird
2024-05-15 00:00:00
KLA67588 Multiple vulnerabilities in Mozilla Firefox
2024-05-14 00:00:00
rocky
rocky
thunderbird security update
2024-06-14 14:00:40
ubuntu
ubuntu
Firefox vulnerabilities
2024-05-21 00:00:00
Firefox regressions
2024-05-29 00:00:00
ubuntucve
ubuntucve
nvd
nvd
github
github
Arbitrary JavaScript execution due to using outdated libraries
2024-06-05 14:15:50
cvelist
cvelist
redhatcve
redhatcve
debiancve
debiancve
cve
cve
veracode
veracode
Permission Issues
2024-05-20 12:36:39
Remote Code Execution (RCE)
2024-05-08 04:43:35
Information Exposure
2024-05-20 12:38:49
githubexploit
githubexploit
Exploit for CVE-2024-4367
2024-05-20 22:56:10
Exploit for CVE-2024-4367
2024-05-20 10:02:23
Exploit for CVE-2024-4367
2024-05-22 18:05:47
vulnrichment
vulnrichment
wpvulndb
wpvulndb
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
2024-06-03 00:00:00
alpinelinux
alpinelinux
CVE-2024-4767
2024-05-14 18:15:13
freebsd
freebsd
Gitlab -- Vulnerabilities
2024-05-22 00:00:00
wordfence
wordfence