Mozilla Thunderbird: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Unscored —
  CVE-2023-3417

  File Extension Spoofing using the Text Direction Override Character

  Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while in fact it was an executable file. Newer versions of Thunderbird will strip the character and show t…

  Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu
  Jul 24, 2023
• Unscored —
  CVE-2023-3600

  Use-after-free in workers

  During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and Thunderbird < 115.0.1.

  Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu Alpine
  Jul 12, 2023

Revision history

1. 2024-02-18 #14

   Neue Updates von Gentoo aufgenommen

2. 2023-10-12 #13

   Neue Updates von Oracle Linux aufgenommen

3. 2023-10-08 #12

   Neue Updates von Oracle Linux aufgenommen

4. 2023-10-05 #11

   Neue Updates von Oracle Linux und Red Hat aufgenommen

5. 2023-10-04 #10

   Neue Updates von Red Hat aufgenommen

6. 2023-10-03 #9

   Neue Updates von Ubuntu aufgenommen

7. 2023-09-20 #8

   Neue Updates von Amazon aufgenommen

8. 2023-08-08 #7

   Neue Updates von Oracle Linux aufgenommen

9. 2023-08-07 #6

   Neue Updates von Red Hat aufgenommen

10. 2023-07-31 #5

    Neue Updates von SUSE aufgenommen

11. 2023-07-30 #4

    Neue Updates von Debian aufgenommen

12. 2023-07-25 #3

    Neue Updates von Mozilla aufgenommen

13. 2023-07-24 #2

    Produktname geändert

14. 2023-07-23 #1

    Initiale Fassung

References

• Mozilla Thunderbird Security Advisory MFSA2023-27 vom 2023-07-23
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-27/
• Mozilla Security Advisory MFSA2023-28 vom 2023-07-25
  https://www.mozilla.org/en-US/security/advisories/mfsa2023-28/
• Debian Security Advisory DSA-5463 vom 2023-07-30
  https://lists.debian.org/debian-security-announce/2023/msg00155.html
• Debian Security Advisory DLA-3510 vom 2023-07-31
  https://lists.debian.org/debian-lts-announce/2023/07/msg00032.html
• SUSE Security Update SUSE-SU-2023:3059-1 vom 2023-07-31
  https://lists.suse.com/pipermail/sle-security-updates/2023-July/015704.html
• Red Hat Security Advisory RHSA-2023:4493 vom 2023-08-07
  https://access.redhat.com/errata/RHSA-2023:4493
• Red Hat Security Advisory RHSA-2023:4495 vom 2023-08-07
  https://access.redhat.com/errata/RHSA-2023:4495
• Red Hat Security Advisory RHSA-2023:4496 vom 2023-08-07
  https://access.redhat.com/errata/RHSA-2023:4496
• Red Hat Security Advisory RHSA-2023:4494 vom 2023-08-07
  https://access.redhat.com/errata/RHSA-2023:4494
• Red Hat Security Advisory RHSA-2023:4497 vom 2023-08-07
  https://access.redhat.com/errata/RHSA-2023:4497
• Red Hat Security Advisory RHSA-2023:4500 vom 2023-08-07
  https://access.redhat.com/errata/RHSA-2023:4500
• Red Hat Security Advisory RHSA-2023:4499 vom 2023-08-07
  https://access.redhat.com/errata/RHSA-2023:4499
• Oracle Linux Security Advisory ELSA-2023-4497 vom 2023-08-09
  https://linux.oracle.com/errata/ELSA-2023-4497.html
• Amazon Linux Security Advisory ALAS-2023-2248 vom 2023-09-21
  https://alas.aws.amazon.com/AL2/ALAS-2023-2248.html
• Ubuntu Security Notice USN-6405-1 vom 2023-10-03
  https://ubuntu.com/security/notices/USN-6405-1
• Red Hat Security Advisory RHSA-2023:5430 vom 2023-10-04
  https://access.redhat.com/errata/RHSA-2023:5430
• Red Hat Security Advisory RHSA-2023:5439 vom 2023-10-04
  https://access.redhat.com/errata/RHSA-2023:5439
• Red Hat Security Advisory RHSA-2023:5438 vom 2023-10-04
  https://access.redhat.com/errata/RHSA-2023:5438
• Red Hat Security Advisory RHSA-2023:5429 vom 2023-10-04
  https://access.redhat.com/errata/RHSA-2023:5429
• Red Hat Security Advisory RHSA-2023:5435 vom 2023-10-04
  https://access.redhat.com/errata/RHSA-2023:5435
• Red Hat Security Advisory RHSA-2023:5432 vom 2023-10-04
  https://access.redhat.com/errata/RHSA-2023:5432
• Red Hat Security Advisory RHSA-2023:5428 vom 2023-10-04
  https://access.redhat.com/errata/RHSA-2023:5428
• Oracle Linux Security Advisory ELSA-2023-5435 vom 2023-10-05
  https://linux.oracle.com/errata/ELSA-2023-5435.html
• Red Hat Security Advisory RHSA-2023:5475 vom 2023-10-05
  https://access.redhat.com/errata/RHSA-2023:5475
• Oracle Linux Security Advisory ELSA-2023-5428 vom 2023-10-07
  http://linux.oracle.com/errata/ELSA-2023-5428.html
• Oracle Linux Security Advisory ELSA-2023-5475 vom 2023-10-12
  http://linux.oracle.com/errata/ELSA-2023-5475.html
• Gentoo Linux Security Advisory GLSA-202402-25 vom 2024-02-19
  https://security.gentoo.org/glsa/202402-25