Multiple vulnerabilities in Mozilla Thunderbird
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 5 |
| CVE-ID | CVE-2022-26383 CVE-2022-26384 CVE-2022-26387 CVE-2022-26381 CVE-2022-26386 |
| CWE-ID | CWE-357 CWE-264 CWE-367 CWE-416 CWE-284 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
Mozilla Thunderbird Client/Desktop applications / Messaging software |
| Vendor | Mozilla |
Security Bulletin
This security bulletin contains information about 5 vulnerabilities.
1) Insufficient UI Warning of Dangerous Operations
EUVDB-ID: #VU61102
Risk: Low
CVSSv3.1:
CVE-ID: CVE-2022-26383
CWE-ID:
Exploit availability:
DescriptionThe vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to an error when resizing a popup after requesting fullscreen access. The popup would not display the fullscreen notification, which allows a remote attacker to perform spoofing attack.
Install update from vendor's website.
Vulnerable software versionsMozilla Thunderbird: 91.0 - 91.6.2
Fixed software versionsCPE2.3 External links
http://www.mozilla.org/en-US/security/advisories/mfsa2022-12/
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
2) Security restrictions bypass
EUVDB-ID: #VU61103
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2022-26384
CWE-ID:
Exploit availability:
DescriptionThe vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to a logic error when processing iframes. If an attacker can control the contents of an iframe sandboxed with allow-popups but not allow-scripts, it is possible to craft a link that, when clicked, would lead to JavaScript execution in violation of the sandbox.
Install update from vendor's website.
Vulnerable software versionsMozilla Thunderbird: 91.0 - 91.6.2
Fixed software versionsCPE2.3 External links
http://www.mozilla.org/en-US/security/advisories/mfsa2022-12/
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
3) Time-of-check Time-of-use (TOCTOU) Race Condition
EUVDB-ID: #VU61104
Risk: Medium
CVSSv3.1:
CVE-ID: CVE-2022-26387
CWE-ID:
Exploit availability:
DescriptionThe vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to a race condition when verifying signatures during Firefox add-on installation. A remote attacker can replace the underlying add-on file while the user was confirming the prompt and install a malicious add-on on the system.
Install update from vendor's website.
Vulnerable software versionsMozilla Thunderbird: 91.0 - 91.6.2
Fixed software versionsCPE2.3 External links
http://www.mozilla.org/en-US/security/advisories/mfsa2022-12/
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
4) Use-after-free
EUVDB-ID: #VU61105
Risk: High
CVSSv3.1:
CVE-ID: CVE-2022-26381
CWE-ID:
Exploit availability:
DescriptionThe vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error when processing HTML content A remote attacker can trigger a use-after-free by forcing a text reflow in an SVG object and execute arbitrary code on the system.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
MitigationInstall update from vendor's website.
Vulnerable software versionsMozilla Thunderbird: 91.0 - 91.6.2
Fixed software versionsCPE2.3 External links
http://www.mozilla.org/en-US/security/advisories/mfsa2022-12/
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
5) Improper access control
EUVDB-ID: #VU61109
Risk: Low
CVSSv3.1:
CVE-ID: CVE-2022-26386
CWE-ID:
Exploit availability:
DescriptionThe vulnerability allows a local user to gain access to victim's downloads.
The vulnerability exists due to browser stores files in the /tmp folder, which is accessible by all local users. A local user can read files from this folder and gain access to potentially sensitive information.
Note, the vulnerability affects Firefox ESR on macOS and Linux.
Install update from vendor's website.
Vulnerable software versionsMozilla Thunderbird: 91.0 - 91.6.2
Fixed software versionsCPE2.3 External links
http://www.mozilla.org/en-US/security/advisories/mfsa2022-12/
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?
