[MFSA-2023-52] Security Vulnerabilities fixed in Thunderbird 115.5

Severity High

Affected Packages 1

Fixed Packages 1

CVEs 7

In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts.

CVE-2023-6204: Out-of-bound memory access in WebGL2 blitFramebuffer (high)
On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element.
CVE-2023-6205: Use-after-free in MessagePort::Entangled (high)
It was possible to cause the use of a MessagePort after it had already
been freed, which could potentially have led to an exploitable crash.
CVE-2023-6206: Clickjacking permission prompts using the fullscreen transition (high)
The black fade animation when exiting fullscreen is roughly
the length of the anti-clickjacking delay on permission prompts.
It was possible to use this fact to surprise users by luring them
to click where the permission grant button would be about to appear.
CVE-2023-6207: Use-after-free in ReadableByteStreamQueueEntry::Buffer (high)
Ownership mismanagement led to a use-after-free in ReadableByteStreams
CVE-2023-6208: Using Selection API would copy contents into X11 primary selection. (moderate)
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboard.
This bug only affects Thunderbird on X11. Other systems are unaffected.
CVE-2023-6209: Incorrect parsing of relative URLs starting with "///" (moderate)
Relative URLs starting with three slashes were incorrectly parsed, and a
path-traversal "/../" part in the path could be used to override the
specified host. This could contribute to security problems in web sites.
CVE-2023-6212: Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5 (high)
Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Package	Affected Version
pkg:mozilla/Thunderbird	< 115.5

Package	Fixed Version
pkg:mozilla/Thunderbird	= 115.5

ID

MFSA-2023-52

Severity

high

URL

https://www.mozilla.org/en-US/security/advisories/mfsa2023-52

Published

2023-11-21T00:00:00
(10 months ago)

Modified

2023-11-21T00:00:00
(10 months ago)

Other Advisories

Source	# ID	Name	URL
Bugzilla	1841050		https://bugzilla.mozilla.org/show_bug.cgi?id=1841050
Bugzilla	1854076		https://bugzilla.mozilla.org/show_bug.cgi?id=1854076
Bugzilla	1857430		https://bugzilla.mozilla.org/show_bug.cgi?id=1857430
Bugzilla	1861344		https://bugzilla.mozilla.org/show_bug.cgi?id=1861344
Bugzilla	1855345		https://bugzilla.mozilla.org/show_bug.cgi?id=1855345
Bugzilla	1858570		https://bugzilla.mozilla.org/show_bug.cgi?id=1858570
Bugzilla	1658432	Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5	https://bugzilla.mozilla.org/show_bug.cgi?id=1658432
Bugzilla	1820983	Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5	https://bugzilla.mozilla.org/show_bug.cgi?id=1820983
Bugzilla	1829252	Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5	https://bugzilla.mozilla.org/show_bug.cgi?id=1829252
Bugzilla	1856072	Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5	https://bugzilla.mozilla.org/show_bug.cgi?id=1856072
Bugzilla	1856091	Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5	https://bugzilla.mozilla.org/show_bug.cgi?id=1856091
Bugzilla	1859030	Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5	https://bugzilla.mozilla.org/show_bug.cgi?id=1859030
Bugzilla	1860943	Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5	https://bugzilla.mozilla.org/show_bug.cgi?id=1860943
Bugzilla	1862782	Memory safety bugs fixed in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5	https://bugzilla.mozilla.org/show_bug.cgi?id=1862782

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:mozilla/Thunderbird		Thunderbird	< 115.5
Fixed	pkg:mozilla/Thunderbird		Thunderbird	= 115.5

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date