TI-2020-05510 CVE-2020-6800 · GHSA-qjg6-3pj8-cqgj
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 42
Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4.
RHSA-2020:0576
thunderbird security update
Released 2020-02-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) thunderbird-68.5.0-1.el7_7
- Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-68.5.0-1.el7_7
- Red Hat Enterprise Linux Workstation (v. 7) thunderbird-68.5.0-1.el7_7
Fixes 6 records
TI-2020-05503 CVE-2020-6793 · GHSA-2g5q-49cr-4f7j
Use of uninitialized resource in Mozilla Thunderbird
Priority LOW 32
When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location.
TI-2020-05508 CVE-2020-6798 · GHSA-qwm2-p76q-cw3g
Cross-site scripting in Mozilla Thunderbird
Priority LOW 31
If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed.
TI-2020-05505 CVE-2020-6795 · GHSA-4whv-ch98-q6fp
NULL pointer dereference in Mozilla Thunderbird
Priority LOW 31
When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash.
TI-2020-05504 CVE-2020-6794 · GHSA-2v3r-qqr5-3x33
Cleartext storage of sensitive information in Mozilla Thunderbird
Priority LOW 31
If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible.
TI-2020-05502 CVE-2020-6792 · GHSA-c3mf-x864-vg86
Use of uninitialized resource in Mozilla Thunderbird
Priority LOW 23
When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents.