Code Execution

2024-03-2501:32:37

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

thunderbird

code execution

vulnerability

input validation

saferefptr class

arbitrary code

7.4 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.3%

JSON

thunderbird is vulnerable to Code Execution. The vulnerability is due to insufficient input validation of certain code paths within the SafeRefPtr class, allowing the attacker to execute arbitrary code.

CPENameOperatorVersion
thunderbird:bustereq1:68.12.0-1~deb10u1
thunderbird:bustereq1:60.9.0-1~deb10u1
thunderbird:bustereq1:78.5.0-1~deb10u1
thunderbird:bustereq1:78.6.0-1~deb10u1
firefox-esr:bullseyeeq78.5.0esr-1
firefox:sideq81.0-2
firefox:sideq83.0-1
firefox:sideq82.0.3-1
thunderbird:bullseyeeq1:78.5.0-1
thunderbird:sideq1:78.5.0-1

Name	Operator	Version
thunderbird:buster	eq	1:68.12.0-1~deb10u1
thunderbird:buster	eq	1:60.9.0-1~deb10u1
thunderbird:buster	eq	1:78.5.0-1~deb10u1
thunderbird:buster	eq	1:78.6.0-1~deb10u1
firefox-esr:bullseye	eq	78.5.0esr-1
firefox:sid	eq	81.0-2
firefox:sid	eq	83.0-1
firefox:sid	eq	82.0.3-1
thunderbird:bullseye	eq	1:78.5.0-1
thunderbird:sid	eq	1:78.5.0-1