Описание
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
A flaw was found in Thunderbird where a maliciously constructed mail header could lead to ambiguous parsing. This vulnerability could result in multiple mail header fields being incorrectly interpreted as one, or cause memory safety violations. A remote attacker could potentially exploit this to trigger unexpected application behavior or a denial of service.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | rhel10/thunderbird-flatpak | Affected | ||
| Red Hat Enterprise Linux 6 | thunderbird | Out of support scope | ||
| Red Hat Enterprise Linux 7 | thunderbird | Out of support scope | ||
| Red Hat Enterprise Linux 10 | thunderbird | Fixed | RHSA-2026:73130 | 29.09.2026 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | thunderbird | Fixed | RHSA-2026:81392 | 12.10.2026 |
| Red Hat Enterprise Linux 8 | thunderbird | Fixed | RHSA-2026:73971 | 30.09.2026 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | thunderbird | Fixed | RHSA-2026:82122 | 13.10.2026 |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | thunderbird | Fixed | RHSA-2026:82122 | 13.10.2026 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | thunderbird | Fixed | RHSA-2026:81913 | 13.10.2026 |
| Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | thunderbird | Fixed | RHSA-2026:81913 | 13.10.2026 |
Показывать по
Дополнительная информация
Статус:
EPSS
6.1 Medium
CVSS3
Связанные уязвимости
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3.
A maliciously constructed mail header could lead to multiple fields be ...
A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16.
EPSS
6.1 Medium
CVSS3