Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-82q7-2fg2-4gcj

Опубликовано: 17 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures.

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures.

EPSS

Процентиль: 56%
0.0033
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 3 лет назад

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures.

CVSS3: 9.8
redhat
больше 4 лет назад

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures.

CVSS3: 9.8
nvd
около 3 лет назад

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures.

CVSS3: 9.8
debian
около 3 лет назад

Thunderbird versions prior to 91.3.0 are vulnerable to the heap overfl ...

rocky
больше 4 лет назад

Important: thunderbird security update

EPSS

Процентиль: 56%
0.0033
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787