Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wq87-gp3m-ww5v

Опубликовано: 15 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16.

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16.

EPSS

Процентиль: 50%
0.00628
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 9.1
ubuntu
около 2 месяцев назад

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

CVSS3: 3.4
redhat
около 2 месяцев назад

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

CVSS3: 9.1
nvd
около 2 месяцев назад

A malicious or compromised IMAP server can trigger an out-of-bounds read in the IMAP response parser by sending an untagged '* ID' response, crashing Thunderbird. The affected parsing path is reachable before authentication. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.

CVSS3: 9.1
debian
около 2 месяцев назад

A malicious or compromised IMAP server can trigger an out-of-bounds re ...

rocky
около 1 месяца назад

Important: thunderbird security update

EPSS

Процентиль: 50%
0.00628
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125