mickmick.net

Mozilla Thunderbird Multiple Vulnerabilities

Release Date: 2 Aug 2022

RISK: Medium Risk

TYPE: Clients - Email Clients

Multiple vulnerabilities were identified in Mozilla Thunderbird. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, spoofing, remote code execution and sensitive information disclosure on the targeted system.

---

Impact

• Denial of Service
• Spoofing
• Remote Code Execution
• Information Disclosure

---

System / Technologies affected

• Thunderbird version prior to 91.12
• Thunderbird version prior to 102.1

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Update to version 91.12
• Update to version 102.1

---

Vulnerability Identifier

• CVE-2022-2505
• CVE-2022-36314
• CVE-2022-36318
• CVE-2022-36319

---

Source

• AusCERT
• Mozilla

---

Related Link

• https://www.auscert.org.au/bulletins/ESB-2022.3732
• https://www.auscert.org.au/bulletins/ESB-2022.3731
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-31/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-32/