USN-7066-1 — thunderbird vulnerability

Summary

Damien Schaeffer discovered that Thunderbird did not properly manage
certain memory operations when processing content in the Animation
timelines. An attacker could potentially exploit this issue to achieve
arbitrary code execution.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	thunderbird	1:115.16.0+build2-0ubuntu0.20.04.1
Ubuntu · 22.04 LTS 22.04:LTS	thunderbird	1:115.16.0+build2-0ubuntu0.22.04.1

Vulnerabilities 1

Critical 9.8

CVE-2024-9680 Exploited · Ransomware Public exploit EPSS 23%

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine Wolfi

Oct 9, 2024
KEV Oct 15, 2024

References

report
https://ubuntu.com/security/CVE-2024-9680

thunderbird vulnerability

Summary

Fixed packages 2

Vulnerabilities 1

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timel…

References