Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2mgp-6265-vwf6

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5.

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5.

EPSS

Процентиль: 61%
0.00419
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 7 лет назад

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5.

CVSS3: 9.8
nvd
почти 7 лет назад

A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5.

CVSS3: 9.8
debian
почти 7 лет назад

A use-after-free vulnerability can occur while playing a sound notific ...

EPSS

Процентиль: 61%
0.00419
Низкий