Summary
It was discovered that Message ID calculation was based on uninitialized
data. An attacker could potentially exploit this to obtain sensitive
information. (CVE-2020-6792)
Mutiple security issues were discovered in Thunderbird. If a user were
tricked in to opening a specially crafted message, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information, or execute arbitrary code. (CVE-2020-6793, CVE-2020-6795,
CVE-2020-6822)
It was discovered that if a user saved passwords before Thunderbird 60
and then later set a master password, an unencrypted copy of these
passwords would still be accessible. A local user could exploit this to
obtain sensitive information. (CVE-2020-6794)
Multiple security issues were discovered in Thunderbird. If a user were
tricked in to opening a specially crafted website in a browsing context,
an attacker could potentially exploit these to cause a denial of service,
conduct cross-site scripting (XSS) attacks, obtain sensitive information,
or execute arbitrary code. (CVE-2019-20503, CVE-2020-6798, CVE-2020-6800,
CVE-2020-6805, CVE-2020-6806, CVE-2020-6807, CVE-2020-6812, CVE-2020-6814,
CVE-2020-6819, CVE-2020-6820, CVE-2020-6821, CVE-2020-6825)
It was discovered that the Devtools’ ‘Copy as cURL’ feature did not
fully escape website-controlled data. If a user were tricked in to using
the ‘Copy as cURL’ feature to copy and paste a command with specially
crafted data in to a terminal, an attacker could potentially exploit this
to execute arbitrary commands via command injection. (CVE-2020-6811)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | thunderbird | 1:68.7.0+build1-0ubuntu0.18.04.1 |
Vulnerabilities 18
-
High 8.1CVE-2020-6819 Exploited
Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free. We are a…
KEV Nov 3, 2021 -
High 8.1CVE-2020-6820 Exploited
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of …
KEV Nov 3, 2021 -
Unscored —
usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.
-
Unscored —
When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. Th…
-
Unscored —
When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location…
-
Unscored —
If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these pass…
-
Unscored —
When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null poi…
-
Unscored —
If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution whe…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some o…
-
Unscored —
When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, re…
-
Unscored —
By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resiz…
-
Unscored —
When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been e…
-
Unscored —
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be …
-
Unscored —
The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's …
-
Unscored —
Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evide…
-
Unscored —
When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method…
-
Unscored —
On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in <code>GMPDeco…
-
Unscored —
Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefo…
References
-
report
https://ubuntu.com/security/CVE-2019-20503
-
report
https://ubuntu.com/security/CVE-2020-6792
-
report
https://ubuntu.com/security/CVE-2020-6793
-
report
https://ubuntu.com/security/CVE-2020-6794
-
report
https://ubuntu.com/security/CVE-2020-6795
-
report
https://ubuntu.com/security/CVE-2020-6798
-
report
https://ubuntu.com/security/CVE-2020-6800
-
report
https://ubuntu.com/security/CVE-2020-6805
-
report
https://ubuntu.com/security/CVE-2020-6806
-
report
https://ubuntu.com/security/CVE-2020-6807
-
report
https://ubuntu.com/security/CVE-2020-6811
-
report
https://ubuntu.com/security/CVE-2020-6812
-
report
https://ubuntu.com/security/CVE-2020-6814
-
report
https://ubuntu.com/security/CVE-2020-6819
-
report
https://ubuntu.com/security/CVE-2020-6820
-
report
https://ubuntu.com/security/CVE-2020-6821
-
report
https://ubuntu.com/security/CVE-2020-6822
-
report
https://ubuntu.com/security/CVE-2020-6825