TI-2019-08809 CVE-2019-11752 · GHSA-5xqq-gc4j-mg29
Use after free in Mozilla Firefox
Priority MEDIUM 42
It is possible to delete an IndexedDB key value and subsequently try to extract it during conversion.
RHSA-2019:2773
thunderbird security update
Released 2019-09-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) thunderbird-60.9.0-1.el7_7
- Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-60.9.0-1.el7_7
- Red Hat Enterprise Linux Workstation (v. 7) thunderbird-60.9.0-1.el7_7
Fixes 7 records
TI-2019-08803 CVE-2019-11746 · GHSA-274m-q55h-jm5r
Use after free in Mozilla Firefox
Priority MEDIUM 41
A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use.
TI-2019-08797 CVE-2019-11740 · GHSA-6wqx-grg2-grhw
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 41
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and Firefox 60.8.
TI-2019-08799 CVE-2019-11742 · GHSA-vcf4-987q-qj6p
A same-origin policy violation occurs allowing the theft of cross-origin images through a…
Priority LOW 32
A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a <canvas> element due to an error in how same-origin policy is applied to cached image conte…
TI-2019-08796 CVE-2019-11739 · GHSA-c6f3-q26v-xmx7
Cleartext transmission of sensitive information in Mozilla Thunderbird
Priority LOW 31
Encrypted S/MIME parts in a crafted multipart/alternative message can leak plaintext when included in a a HTML reply/forward.
TI-2019-08801 CVE-2019-11744 · GHSA-gf55-vpjv-mh2j
Cross-site scripting in Mozilla Firefox
Priority LOW 30
Some HTML elements, such as <title> and <textarea>, can contain literal angle brackets without treating them as markup.
TI-2019-08800 CVE-2019-11743 · GHSA-98fg-hp5j-cm68
Observable discrepancy in Mozilla Firefox
Priority LOW 21
Navigation events were not fully adhering to the W3C's "Navigation-Timing Level 2" draft specification in some instances for the unload event, which restricts access to detailed timing attributes to only be same-origin.