[MFSA-2023-47] Security Vulnerabilities fixed in Thunderbird 115.4.1

Severity High

Affected Packages 1

Fixed Packages 1

CVEs 8

In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts.

CVE-2023-5721: Queued up rendering could have allowed websites to clickjack (high)
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay.
CVE-2023-5724: Large WebGL draw could have led to a crash (moderate)
Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash.
CVE-2023-5725: WebExtensions could open arbitrary URLs (moderate)
A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data.
CVE-2023-5726: Full screen notification obscured by file open dialog on macOS (moderate)
A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks.
Note: This issue only affected macOS operating systems. Other operating systems are unaffected.
CVE-2023-5727: Download Protections were bypassed by .msix, .msixbundle, .appx, and .appxbundle files on Windows (moderate)
The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer.

Note: This issue only affected Windows operating systems. Other operating systems are unaffected.
CVE-2023-5728: Improper object tracking during GC in the JavaScript engine could have led to a crash. (moderate)
During garbage collection extra operations were performed on a object that should not be. This could have led to a potentially exploitable crash.
CVE-2023-5730: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1 (high)
Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
CVE-2023-5732: Address bar spoofing via bidirectional characters (moderate)
An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited.

Package	Affected Version
pkg:mozilla/Thunderbird	< 115.4.1

Package	Fixed Version
pkg:mozilla/Thunderbird	= 115.4.1

ID

MFSA-2023-47

Severity

high

URL

https://www.mozilla.org/en-US/security/advisories/mfsa2023-47

Published

2023-10-24T00:00:00
(10 months ago)

Modified

2023-10-24T00:00:00
(10 months ago)

Other Advisories

Source	# ID	Name	URL
Bugzilla	1830820		https://bugzilla.mozilla.org/show_bug.cgi?id=1830820
Bugzilla	1836705		https://bugzilla.mozilla.org/show_bug.cgi?id=1836705
Bugzilla	1845739		https://bugzilla.mozilla.org/show_bug.cgi?id=1845739
Bugzilla	1846205		https://bugzilla.mozilla.org/show_bug.cgi?id=1846205
Bugzilla	1847180		https://bugzilla.mozilla.org/show_bug.cgi?id=1847180
Bugzilla	1852729		https://bugzilla.mozilla.org/show_bug.cgi?id=1852729
Bugzilla	1836607	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1836607
Bugzilla	1840918	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1840918
Bugzilla	1848694	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1848694
Bugzilla	1848833	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1848833
Bugzilla	1850191	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1850191
Bugzilla	1850259	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1850259
Bugzilla	1852596	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1852596
Bugzilla	1853201	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1853201
Bugzilla	1854002	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1854002
Bugzilla	1855306	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1855306
Bugzilla	1855640	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1855640
Bugzilla	1856695	Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1	https://bugzilla.mozilla.org/show_bug.cgi?id=1856695
Bugzilla	1690979		https://bugzilla.mozilla.org/show_bug.cgi?id=1690979
Bugzilla	1836962		https://bugzilla.mozilla.org/show_bug.cgi?id=1836962

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:mozilla/Thunderbird		Thunderbird	< 115.4.1
Fixed	pkg:mozilla/Thunderbird		Thunderbird	= 115.4.1

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date