CVE-2019-11705

CVSS v3.1 9.8 (Critical)

CVSS v2.0 7.5 (High)

EPSS 21.70 % (97^th)

Affected Products 1

Advisories 19

A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur_add_bydayrules when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.7.1.

Weaknesses

CWE-787: Out-of-bounds Write

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2019-07-23 14:15:15
(5 years ago)
Updated Date: 2023-02-02 15:03:47
(19 months ago)

Affected Products

Mozilla

Thunderbird

Configuration #1

		CPE23	From	Up To
	Mozilla Thunderbird prior 60.7.1 version	cpe:2.3:a:mozilla:thunderbird		< 60.7.1