mickmick.net

Mozilla Thunderbird Multiple Vulnerabilities

Release Date: 25 Oct 2022

RISK: Medium Risk

TYPE: Clients - Email Clients

Multiple vulnerabilities were identified in Mozilla Thunderbird. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution and cross-site scripting on the targeted system.

---

Impact

• Cross-Site Scripting
• Remote Code Execution
• Denial of Service

---

System / Technologies affected

• Thunderbird version prior to 102.4

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Update to version 102.4

---

Vulnerability Identifier

• CVE-2022-42927
• CVE-2022-42928
• CVE-2022-42929
• CVE-2022-42932

---

Source

• AusCERT
• Mozilla

---

Related Link

• https://www.auscert.org.au/bulletins/ESB-2022.5306
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-46/