Red Hat Security AdvisoryRHSA-2023:3151
thunderbird security update
Released 2023-05-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) thunderbird-102.11.0-1.el7_9
- Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-102.11.0-1.el7_9
- Red Hat Enterprise Linux Workstation (v. 7) thunderbird-102.11.0-1.el7_9
Fixes 7 records
Priority MEDIUM 53
An attacker could have positioned a `datalist` element to obscure the address bar.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00647 · Published 2023-06-02 · Partial fix · 113, 102.11
Priority MEDIUM 41
A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00731 · Published 2023-06-02 · Partial fix · 113, 102.11 CWE-290
Priority LOW 39
Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112 and Firefox ESR…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00753 · Published 2023-06-02 · Partial fix · 113, 102.11 CWE-787
Priority LOW 39
When reading a file, an uninitialized value could have been used as read limit.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00753 · Published 2023-06-02 · Partial fix · 113, 102.11 CWE-908
Priority LOW 30
A type checking bug would have led to invalid code being compiled.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00738 · Published 2023-06-02 · Partial fix · 113, 102.11
Priority LOW 30
An out-of-bound read could have led to a crash in the RLBox Expat driver.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00703 · Published 2023-06-02 · Partial fix · 113, 102.11 CWE-125
Priority LOW 21
In multiple cases browser prompts could have been obscured by popups controlled by content.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00631 · Published 2023-06-02 · Partial fix · 113, 102.11