[MFSA-2020-35] Security Vulnerabilities fixed in Thunderbird 68.11

Severity High

Affected Packages 1

Fixed Packages 1

CVEs 4

In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts.

CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker (high)
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script.
CVE-2020-15659: Memory safety bugs fixed in Thunderbird 68.11 (high)
Mozilla developers Jason Kratzer and Luke Wagner reported memory safety bugs present in Thunderbird 68.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture (moderate)
Crafted media files could lead to a race in texture caches, resulting in a use-after-free, memory corruption, and a potentially exploitable crash.
CVE-2020-6514: WebRTC data channel leaks internal address to peer (high)
WebRTC used the memory address of a class instance as a connection identifier.
Unfortunately, this value is often transmitted to the peer, which allows bypassing ASLR.

Package	Affected Version
pkg:mozilla/Thunderbird	< 68.11

Package	Fixed Version
pkg:mozilla/Thunderbird	= 68.11

ID

MFSA-2020-35

Severity

high

URL

https://www.mozilla.org/en-US/security/advisories/mfsa2020-35

Published

2020-07-30T00:00:00
(4 years ago)

Modified

2020-07-30T00:00:00
(4 years ago)

Other Advisories

Source	# ID	Name	URL
Bugzilla	1634872		https://bugzilla.mozilla.org/show_bug.cgi?id=1634872
Bugzilla	1550133	Memory safety bugs fixed in Thunderbird 68.11	https://bugzilla.mozilla.org/show_bug.cgi?id=1550133
Bugzilla	1633880	Memory safety bugs fixed in Thunderbird 68.11	https://bugzilla.mozilla.org/show_bug.cgi?id=1633880
Bugzilla	1646787	Memory safety bugs fixed in Thunderbird 68.11	https://bugzilla.mozilla.org/show_bug.cgi?id=1646787
Bugzilla	1650811	Memory safety bugs fixed in Thunderbird 68.11	https://bugzilla.mozilla.org/show_bug.cgi?id=1650811
Bugzilla	1635293		https://bugzilla.mozilla.org/show_bug.cgi?id=1635293
Bugzilla	1642792		https://bugzilla.mozilla.org/show_bug.cgi?id=1642792

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:mozilla/Thunderbird		Thunderbird	< 68.11
Fixed	pkg:mozilla/Thunderbird		Thunderbird	= 68.11

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date