TI-2019-12695 CVE-2019-17012 · GHSA-q2gm-8f48-27f9
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 42
Mozilla developers reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2.
Vulnerabilities
7 records
TI-2019-12694 CVE-2019-17011 · GHSA-qqwr-j46x-f6mj
Race condition in Mozilla Thunderbird
Priority LOW 36
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a potentially exploitable crash.
TI-2019-12693 CVE-2019-17010 · GHSA-3f69-xhq6-c8m8
Race condition in Mozilla Thunderbird
Priority LOW 36
Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-free and a potentially exploitable crash.
TI-2019-12692 CVE-2019-17009 · GHSA-9wr8-jjcr-qw4x
When running, the updater service wrote status and log files to an unrestricted location…
Priority LOW 34
When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater service.
TI-2019-12691 CVE-2019-17008 · GHSA-vm87-9hjc-x68w
Use after free in Mozilla Thunderbird
Priority MEDIUM 42
When using nested workers, a use-after-free could occur during worker destruction.
TI-2019-12688 CVE-2019-17005 · GHSA-p5rh-pvj2-8vfv
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 42
The plain text serializer used a fixed-size array for the number of <ol> elements it could process; however it was possible to overflow the static-sized array leading to memory corruption and a potentially exploitable cr…
TI-2019-08802 CVE-2019-11745 · GHSA-gmvm-jpfj-v3f5
Out-of-bounds write in Mozilla Thunderbird
Priority MEDIUM 44
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a small out of bounds write could occur.