Multiple vulnerabilities in Mozilla Thunderbird

Description

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service.

Below is a complete list of vulnerabilities:

1. A security vulnerability can be exploited via special crafted version of key to bypass security restrictions.
2. A denial of service vulnerability can be exploited via special crafted OpenPGP key to cause denial of service.
3. A vulnerability can be exploited via special crafted library to bypass security restrictions.

Original advisories

• MFSA2020-13

Related products

• Mozilla-Thunderbird

CVE list

• CVE-2021-23991
  high
• CVE-2021-23993
  high
• CVE-2021-23992
  warning
• CVE-2021-29949
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com