KLA12397
Multiple vulnerabilities in Mozilla Thunderbird

Updated: 12/27/2021
Detect date
?
12/21/2021
Severity
?
Warning
Description

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface.

Below is a complete list of vulnerabilities:

  1. Buffer overflow vulnerability in libolm can be exploited remotely via special crafted message to cause denial of service.
  2. Security UI vulnerability can be exploited via special crafted message to spoof user interface.
Affected products

Mozilla Thunderbird earlier than 91.4.1

Solution

Update to the latest version
Download Thunderbird

Original advisories

MFSA2021-55

Impacts
?
DoS 
[?]

SUI 
[?]
Related products
Mozilla Thunderbird
CVE-IDS
?
CVE-2021-445387.5Critical
Find out the statistics of the vulnerabilities spreading in your region