USN-6214-1: Thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code. (CVE-2023-34414, CVE-2023-34416, CVE-2023-37201, CVE-2023-37202, CVE-2023-37207, CVE-2023-37211) P Umar Farooq discovered that Thunderbird did not properly provide warning when opening Diagcab files. If a user were tricked into opening a malicicous Diagcab file, an attacker could execute arbitrary code. (CVE-2023-37208)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6214-1?
The severity of USN-6214-1 is high.
How can an attacker exploit the vulnerabilities in Thunderbird?
An attacker can exploit the vulnerabilities in Thunderbird by tricking a user into opening a specially crafted website in a browsing context.
What can an attacker do if they successfully exploit the vulnerabilities in Thunderbird?
If an attacker successfully exploits the vulnerabilities in Thunderbird, they can cause a denial of service, obtain sensitive information, bypass security restrictions, and perform cross-site tracing.
How can I fix the Thunderbird vulnerabilities in Ubuntu version 23.04?
To fix the Thunderbird vulnerabilities in Ubuntu version 23.04, update the Thunderbird package to version 1:102.13.0+build1-0ubuntu0.23.04.1.
Where can I find more information about the Thunderbird vulnerabilities?
You can find more information about the Thunderbird vulnerabilities on the Ubuntu Security Notices website.