Summary
Christian Holler, Carsten Book, Gary Kwong, Jesse Ruderman, Andrew
McCreight, and Phil Ringnalda discovered multiple memory safety issues in
Thunderbird. If a user were tricked in to opening a specially crafted
message, an attacker could potentially exploit these to cause a denial of
service via application crash, or execute arbitrary code. (CVE-2016-2836)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | thunderbird | 1:45.3.0+build1-0ubuntu0.14.04.4 |
| Ubuntu · 16.04 LTS 16.04:LTS | thunderbird | 1:45.3.0+build1-0ubuntu0.16.04.2 |
Vulnerabilities 1
-
Unscored —
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 4…
References
-
report
https://ubuntu.com/security/CVE-2016-2836