USN-4241-1: Thunderbird vulnerabilities
First published: Thu Jan 16 2020(Updated: )
Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, conduct cross-site scripting (XSS) attacks, or execute arbitrary code. (CVE-2019-17005, CVE-2019-17008, CVE-2019-17010, CVE-2019-17011, CVE-2019-17012, CVE-2019-17016, CVE-2019-17017, CVE-2019-17022, CVE-2019-17024, CVE-2019-17026) It was discovered that NSS incorrectly handled certain memory operations. A remote attacker could potentially exploit this to cause a denial of service, or execute arbitrary code. (CVE-2019-11745)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/thunderbird | <1:68.4.1+build1-0ubuntu0.19.10.1 | 1:68.4.1+build1-0ubuntu0.19.10.1 |
| =19.10 | ||
| All of | ||
| ubuntu/thunderbird | <1:68.4.1+build1-0ubuntu0.18.04.1 | 1:68.4.1+build1-0ubuntu0.18.04.1 |
| =18.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2019-11745
- https://ubuntu.com/security/CVE-2019-17005
- https://ubuntu.com/security/CVE-2019-17008
- https://ubuntu.com/security/CVE-2019-17010
- https://ubuntu.com/security/CVE-2019-17011
- https://ubuntu.com/security/CVE-2019-17012
- https://ubuntu.com/security/CVE-2019-17016
- https://ubuntu.com/security/CVE-2019-17017
- https://ubuntu.com/security/CVE-2019-17022
- https://ubuntu.com/security/CVE-2019-17024
- https://ubuntu.com/security/CVE-2019-17026
- https://ubuntu.com/security/notices/USN-4216-2
- https://ubuntu.com/security/notices/USN-4216-1
- https://ubuntu.com/security/notices/USN-4335-1
- https://ubuntu.com/security/notices/USN-4203-1
- https://ubuntu.com/security/notices/USN-4203-2
- https://ubuntu.com/security/notices/USN-4234-1
- https://launchpad.net/ubuntu/+source/thunderbird/1:68.4.1+build1-0ubuntu0.19.10.1
- https://launchpad.net/ubuntu/+source/thunderbird/1:68.4.1+build1-0ubuntu0.18.04.1
- https://ubuntu.com/security/notices/USN-4241-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for this Thunderbird vulnerability?
The vulnerability ID for this Thunderbird vulnerability is CVE-2019-11745, CVE-2019-17005, and CVE-2019-17008.
How can this vulnerability be exploited?
This vulnerability can be exploited by tricking a user into opening a specially crafted website in a browsing context.
What are the potential impacts of this vulnerability?
The potential impacts of this vulnerability include denial of service, cross-site scripting (XSS) attacks, and execution of arbitrary code.
Which versions of Thunderbird are affected?
Versions 68.4.1+build1-0ubuntu0.19.10.1 and 68.4.1+build1-0ubuntu0.18.04.1 of Thunderbird are affected.
How can I fix this vulnerability?
To fix this vulnerability, update Thunderbird to version 1:68.4.1+build1-0ubuntu0.19.10.1 if you are using Ubuntu 19.10, or update to version 1:68.4.1+build1-0ubuntu0.18.04.1 if you are using Ubuntu 18.04.
- agent/severity
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/title
- agent/weakness
- agent/description
- agent/event
- agent/tags
- collector/usn
- source/Ubuntu
- anchor-related/USN-4216-2
- anchor-related/USN-4216-1
- anchor-related/USN-4335-1
- anchor-related/USN-4203-1
- anchor-related/USN-4203-2
- anchor-related/USN-4234-1
- agent/software-canonical-lookup
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/19.10
- version/ubuntu ubuntu/18.04