Multiple vulnerabilities in Mozilla Thunderbird

Description

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

1. A type confusion vulnerability in JIT optimization can be exploited to obtain sensitive information.
2. A denial of service vulnerability in JIT can be exploited to cause denial of service.
3. A security UI vulnerability on Linux can be exploited to spoof user interface and gain privileges.

Original advisories

• MFSA2021-36

Exploitation

Public exploits exist for this vulnerability.

Related products

• Mozilla-Thunderbird

CVE list

• CVE-2021-29981
  critical
• CVE-2021-29982
  high
• CVE-2021-29987
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com