Multiple vulnerabilities in Mozilla Thunderbird

Description

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. A memory corruption vulnerability on Linux can be exploited to cause denial of service.
2. A memory corruption vulnerability can be exploited to cause denial of service.
3. A memory safety vulnerability can be exploited to execute arbitrary code.
4. A use after free vulnerability in media channels can be exploited to cause denial of service.
5. A uninitialized memory vulnerability in canvas can be epxloted to cause denial of service.
6. A memory corruption vulnerability in JIT optimization can be exploited to cause denial of service.

Original advisories

• MFSA2021-35

Exploitation

Public exploits exist for this vulnerability.

Related products

• Mozilla-Thunderbird

CVE list

• CVE-2021-29986
  critical
• CVE-2021-29988
  critical
• CVE-2021-29989
  critical
• CVE-2021-29985
  critical
• CVE-2021-29980
  critical
• CVE-2021-29984
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com