Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-82q7-2fg2-4gcj

Опубликовано: 17 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures.

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures.

EPSS

Процентиль: 29%
0.00101
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 3 года назад

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures.

CVSS3: 9.8
redhat
около 4 лет назад

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures.

CVSS3: 9.8
nvd
почти 3 года назад

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures.

CVSS3: 9.8
debian
почти 3 года назад

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overfl ...

rocky
около 4 лет назад

Important: thunderbird security update

EPSS

Процентиль: 29%
0.00101
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787