tocsin

Debian/thunderbird: high 7.5

A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2.

Action: Upgrade thunderbird to 1:140.15.0esr-1~deb12u1 or later.

Affected

introducedfixedlast affected
01:140.15.0esr-1~deb12u1-

Fixed versions

1:140.15.0esr-1~deb12u1

Sources

published · modified · JSON