説明
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, perform cross-site scripting attack, execute arbitrary code, cause denial of service, spoof user interface, gain privileges.
Below is a complete list of vulnerabilities:
- Cross-site scripting (XSS) vulnerability can be exploited to perform cross-site scripting attack.
- Cross-site scripting (XSS) vulnerability for Android can be exploited to perform cross-site scripting attack.
- Memory corruption vulnerability can be exploited to cause a denial of service.
- Security UI vulnerability can be exploited to spoof user interface.
- Validation of untrusted input vulnerability in new tab page can be exploited to bypass security restrictions.
- Type confusion vulnerability in WebTransport can be exploited to cause denial of service.
- Memory corruption vulnerability that occurs when reading from memory at a specific point during JIT compilation can be exploited to cause a denial of service.
- Memory safety vulnerability can be exploited to execute arbitrary code.
- Security vulnerability in Clipboard can be exploited to bypass security restrictions.
オリジナルアドバイザリー
関連製品
CVEリスト
- CVE-2024-8900 warning
- CVE-2024-9397 unknown
- CVE-2024-9398 unknown
- CVE-2024-9392 unknown
- CVE-2024-9402 unknown
- CVE-2024-9396 unknown
- CVE-2024-9399 unknown
- CVE-2024-9393 unknown
- CVE-2024-9401 unknown
- CVE-2024-9394 unknown
- CVE-2024-9400 unknown
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！