1. Home
  2. Security Advisories
  3. Mozilla
  4. MFSA-2023-32

[MFSA-2023-32] Security Vulnerabilities fixed in Thunderbird 102.14

Severity High
Affected Packages 1
Fixed Packages 1
CVEs 9
Info Packages References Vulnerabilities

In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts.

  • CVE-2023-4045: Offscreen Canvas could have bypassed cross-origin restrictions (high)
    Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy.

  • CVE-2023-4046: Incorrect value used during WASM compilation (high)
    In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process.

  • CVE-2023-4047: Potential permissions request bypass via clickjacking (high)
    A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions.

  • CVE-2023-4048: Crash in DOMParser due to out-of-memory conditions (high)
    An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations.

  • CVE-2023-4049: Fix potential race conditions when releasing platform objects (high)
    Race conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilities.

  • CVE-2023-4050: Stack buffer overflow in StorageManager (high)
    In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape.

  • CVE-2023-4054: Lack of warning when opening appref-ms files (moderate)
    When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code.
    This bug only affects Firefox on Windows. Other operating systems are unaffected.

  • CVE-2023-4055: Cookie jar overflow caused unexpected cookie jar state (low)
    When the number of cookies per domain was exceeded in <code>document.cookie</code>, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests to be sent with some cookies missing.

  • CVE-2023-4056: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (high)
    Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Package Affected Version
pkg:mozilla/Thunderbird < 102.14
Package Fixed Version
pkg:mozilla/Thunderbird = 102.14
ID
MFSA-2023-32
Severity
high
URL
https://www.mozilla.org/en-US/security/advisories/mfsa2023-32
Published
2023-08-02T00:00:00
(13 months ago)
Modified
2023-08-02T00:00:00
(13 months ago)
Other Advisories
Source # ID Name URL
Bugzilla 1833876 https://bugzilla.mozilla.org/show_bug.cgi?id=1833876
Bugzilla 1837686 https://bugzilla.mozilla.org/show_bug.cgi?id=1837686
Bugzilla 1839073 https://bugzilla.mozilla.org/show_bug.cgi?id=1839073
Bugzilla 1841368 https://bugzilla.mozilla.org/show_bug.cgi?id=1841368
Bugzilla 1842658 https://bugzilla.mozilla.org/show_bug.cgi?id=1842658
Bugzilla 1843038 https://bugzilla.mozilla.org/show_bug.cgi?id=1843038
Bugzilla 1840777 https://bugzilla.mozilla.org/show_bug.cgi?id=1840777
Bugzilla 1782561 https://bugzilla.mozilla.org/show_bug.cgi?id=1782561
Bugzilla 1820587 Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 https://bugzilla.mozilla.org/show_bug.cgi?id=1820587
Bugzilla 1824634 Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 https://bugzilla.mozilla.org/show_bug.cgi?id=1824634
Bugzilla 1839235 Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 https://bugzilla.mozilla.org/show_bug.cgi?id=1839235
Bugzilla 1842325 Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 https://bugzilla.mozilla.org/show_bug.cgi?id=1842325
Bugzilla 1843847 Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 https://bugzilla.mozilla.org/show_bug.cgi?id=1843847
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:mozilla/Thunderbird Thunderbird < 102.14
Fixed pkg:mozilla/Thunderbird Thunderbird = 102.14
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date