説明
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, cause denial of service, perform cross-site scripting attack, gain privileges, execute arbitrary code.
Below is a complete list of vulnerabilities:
- Security UI vulnerability sing a data: URL within an iframe can be exploited to spoof user interface.
- Security vulnerability can be exploited to bypass security restrictions.
- Denial of service vulnerability can be exploited remotely to cause denial of service.
- Security UI vulnerability in cursor can be exploited to spoof user interface.
- Cross-site scripting (XSS) vulnerability in multipart/x-mixed-replace response can be exploited to perform cross-site scripting attack.
- Security vulnerability in composition area can be exploited to bypass security restrictions.
- An elevation of privilege vulnerability can be exploited remotely to gain privileges.
- Memory safety vulnerability can be exploited to execute arbitrary code.
- Use after free vulnerability in layout with accessibility can be exploited to cause denial of service or execute arbitrary code.
オリジナルアドバイザリー
関連製品
CVEリスト
- CVE-2024-10460 warning
- CVE-2024-10463 warning
- CVE-2024-10465 warning
- CVE-2024-10466 warning
- CVE-2024-10461 warning
- CVE-2024-10462 warning
- CVE-2024-10458 warning
- CVE-2024-10467 warning
- CVE-2024-10464 warning
- CVE-2024-10459 warning
- CVE-2024-10468 warning
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！