USN-5972-1

Dashboard / Vulnerabilities / USN-5972-1

USN-5972-1

Summary: thunderbird vulnerabilities

Details: Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code. (CVE-2023-25152, CVE-2023-28162, CVE-2023-28176) Lukas Bernhard discovered that Thunderbird did not properly manage memory when invalidating JIT code while following an iterator. An attacker could potentially exploits this issue to cause a denial of service. (CVE-2023-25751) Luan Herrera discovered that Thunderbird did not properly manage cross-origin iframe when dragging a URL. An attacker could potentially exploit this issue to perform spoofing attacks. (CVE-2023-28164)

References: https://ubuntu.com/security/notices/USN-5972-1, https://ubuntu.com/security/CVE-2023-25751, https://ubuntu.com/security/CVE-2023-25752, https://ubuntu.com/security/CVE-2023-28162, https://ubuntu.com/security/CVE-2023-28164, https://ubuntu.com/security/CVE-2023-28176