Multiple vulnerabilities in Mozilla Thunderbird

Description

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code and bypass security restrictions.

Below is a complete list of vulnerabilities:

1. Buffer overflow vulnerability in IonMonkey JIT compiler can be exploited remotely to execute arbitrary code;
2. Type confusion vulnerability in IonMonkey JIT compiler can be exploited remotely to bypass security restrictions.

Original advisories

• mfsa2019-12

Exploitation

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Related products

• Mozilla-Thunderbird

CVE list

• CVE-2019-9810
  high
• CVE-2019-9813
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com