Out-of-Bounds Write

2023-04-2009:38:13

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

thunderbird vulnerability out-of-bounds write remote attack software denial of service arbitrary code execution improper memory management operations

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.002 Low

EPSS

Percentile

53.4%

JSON

thunderbird is vulnerable to Out-of-bounds Write. A remote local attacker is able to cause out-of-bound writes due to improper memory management operations, resulting in a denial of service or arbitrary code execution.

CPENameOperatorVersion
thunderbird:bioniceq1:68.10.0+build1-0ubuntu0.18.04.1
thunderbird:bioniceq1:78.13.0+build1-0ubuntu0.18.04.1
thunderbird:bioniceq1:52.7.0+build1-0ubuntu1
firefox:focaleq75.0+build3-0ubuntu1
firefox:focaleq83.0+build2-0ubuntu0.20.04.1
firefox:focaleq80.0.1+build1-0ubuntu0.20.04.1
firefox:focaleq80.0+build2-0ubuntu0.20.04.1
firefox:bioniceq83.0+build2-0ubuntu0.18.04.2
firefox:bioniceq92.0+build3-0ubuntu0.18.04.1
firefox:bioniceq80.0.1+build1-0ubuntu0.18.04.1

Name	Operator	Version
thunderbird:bionic	eq	1:68.10.0+build1-0ubuntu0.18.04.1
thunderbird:bionic	eq	1:78.13.0+build1-0ubuntu0.18.04.1
thunderbird:bionic	eq	1:52.7.0+build1-0ubuntu1
firefox:focal	eq	75.0+build3-0ubuntu1
firefox:focal	eq	83.0+build2-0ubuntu0.20.04.1
firefox:focal	eq	80.0.1+build1-0ubuntu0.20.04.1
firefox:focal	eq	80.0+build2-0ubuntu0.20.04.1
firefox:bionic	eq	83.0+build2-0ubuntu0.18.04.2
firefox:bionic	eq	92.0+build3-0ubuntu0.18.04.1
firefox:bionic	eq	80.0.1+build1-0ubuntu0.18.04.1

Rows per page:

1-10 of 10601

References

git://git.launchpad.net/ubuntu-cve-tracker/tree/active/CVE-2023-29550

bugzilla.mozilla.org/buglist.cgi?bug_id=1720594%2C1812498%2C1814217%2C1818357%2C1751945%2C1818762%2C1819493%2C1820389%2C1820602%2C1821448%2C1822413%2C1824828

www.mozilla.org/security/advisories/mfsa2023-13/

www.mozilla.org/security/advisories/mfsa2023-14/

www.mozilla.org/security/advisories/mfsa2023-15/