TI-2020-05529 CVE-2020-6820 · GHSA-f77r-rqc9-53hh
Race condition in Mozilla Thunderbird
Priority CRITICAL 94KEV
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.
RHSA-2020:1489
thunderbird security update
Released 2020-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) thunderbird-68.7.0-1.el7_8
- Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-68.7.0-1.el7_8
- Red Hat Enterprise Linux Workstation (v. 7) thunderbird-68.7.0-1.el7_8
Fixes 5 records
TI-2020-05528 CVE-2020-6819 · GHSA-cv8q-mpvf-42h2
Use after free in Mozilla Thunderbird
Priority CRITICAL 94KEV
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free.
TI-2020-05534 CVE-2020-6825 · GHSA-pj8r-w3xr-j4w5
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 46
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6.
TI-2020-05531 CVE-2020-6822 · GHSA-v2mh-4gcf-6ghr
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 41
On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDecodeData</code>.
TI-2020-05530 CVE-2020-6821 · GHSA-jj5p-vxx9-rvj7
Use of uninitialized resource in Mozilla Thunderbird
Priority LOW 36
When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the returned values be zero.