Test Kennung:	1.3.6.1.4.1.25623.1.0.815082
Kategorie:	General
Titel:	Mozilla Thunderbird Security Update (mfsa_2019-13_2019-15) - Windows
Zusammenfassung:	Mozilla Thunderbird is prone to multiple vulnerabilities.
Beschreibung:	Summary: Mozilla Thunderbird is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - An out-of-bounds read error in Skia. - Theft of user history data through drag and drop of hyperlinks to and from bookmarks. - An uninitialized memory memory leakage in Windows. - Cross-origin theft of images with ImageBitmapRenderingContext and createImageBitmap. - Multiple use-after-free errors in png_image_free of libpng library, event listener manager, XMLHttpRequest, chrome event handler and crash generation server. - Compartment mismatch with fetch API. - Stealing of cross-domain images using canvas. - Type confusion with object groups and UnboxedObjects. - A timing attack vulnerability related to not disabling hyperthreading. - Memory safety bugs Vulnerability Impact: Successful exploitation allows attackers to conduct timing attack, security bypass, execute arbitrary code denial of service. Affected Software/OS: Mozilla Thunderbird versions before 60.7. Solution: Update to version 60.7 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-9815 https://bugzilla.mozilla.org/show_bug.cgi?id=1546544 https://mdsattacks.com/ https://www.mozilla.org/security/advisories/mfsa2019-13/ https://www.mozilla.org/security/advisories/mfsa2019-14/ https://www.mozilla.org/security/advisories/mfsa2019-15/ Common Vulnerability Exposure (CVE) ID: CVE-2019-9816 https://bugzilla.mozilla.org/show_bug.cgi?id=1536768 Common Vulnerability Exposure (CVE) ID: CVE-2019-9817 https://bugzilla.mozilla.org/show_bug.cgi?id=1540221 Common Vulnerability Exposure (CVE) ID: CVE-2019-9818 https://bugzilla.mozilla.org/show_bug.cgi?id=1542581 Common Vulnerability Exposure (CVE) ID: CVE-2019-9819 https://bugzilla.mozilla.org/show_bug.cgi?id=1532553 Common Vulnerability Exposure (CVE) ID: CVE-2019-9820 https://bugzilla.mozilla.org/show_bug.cgi?id=1536405 Common Vulnerability Exposure (CVE) ID: CVE-2019-7317 BugTraq ID: 108098 http://www.securityfocus.com/bid/108098 Bugtraq: 20190417 [slackware-security] libpng (SSA:2019-107-01) (Google Search) https://seclists.org/bugtraq/2019/Apr/30 Bugtraq: 20190429 [SECURITY] [DSA 4435-1] libpng1.6 security update (Google Search) https://seclists.org/bugtraq/2019/Apr/36 Bugtraq: 20190522 [slackware-security] mozilla-firefox (SSA:2019-141-01) (Google Search) https://seclists.org/bugtraq/2019/May/56 Bugtraq: 20190523 [SECURITY] [DSA 4448-1] firefox-esr security update (Google Search) https://seclists.org/bugtraq/2019/May/59 Bugtraq: 20190527 [SECURITY] [DSA 4451-1] thunderbird security update (Google Search) https://seclists.org/bugtraq/2019/May/67 https://security.netapp.com/advisory/ntap-20190719-0005/ https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03977en_us Debian Security Information: DSA-4435 (Google Search) https://www.debian.org/security/2019/dsa-4435 Debian Security Information: DSA-4448 (Google Search) https://www.debian.org/security/2019/dsa-4448 Debian Security Information: DSA-4451 (Google Search) https://www.debian.org/security/2019/dsa-4451 https://security.gentoo.org/glsa/201908-02 http://packetstormsecurity.com/files/152561/Slackware-Security-Advisory-libpng-Updates.html https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12803 https://github.com/glennrp/libpng/issues/275 https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html https://lists.debian.org/debian-lts-announce/2019/05/msg00032.html https://lists.debian.org/debian-lts-announce/2019/05/msg00038.html RedHat Security Advisories: RHSA-2019:1265 https://access.redhat.com/errata/RHSA-2019:1265 RedHat Security Advisories: RHSA-2019:1267 https://access.redhat.com/errata/RHSA-2019:1267 RedHat Security Advisories: RHSA-2019:1269 https://access.redhat.com/errata/RHSA-2019:1269 RedHat Security Advisories: RHSA-2019:1308 https://access.redhat.com/errata/RHSA-2019:1308 RedHat Security Advisories: RHSA-2019:1309 https://access.redhat.com/errata/RHSA-2019:1309 RedHat Security Advisories: RHSA-2019:1310 https://access.redhat.com/errata/RHSA-2019:1310 RedHat Security Advisories: RHSA-2019:2494 https://access.redhat.com/errata/RHSA-2019:2494 RedHat Security Advisories: RHSA-2019:2495 https://access.redhat.com/errata/RHSA-2019:2495 RedHat Security Advisories: RHSA-2019:2585 https://access.redhat.com/errata/RHSA-2019:2585 RedHat Security Advisories: RHSA-2019:2590 https://access.redhat.com/errata/RHSA-2019:2590 RedHat Security Advisories: RHSA-2019:2592 https://access.redhat.com/errata/RHSA-2019:2592 RedHat Security Advisories: RHSA-2019:2737 https://access.redhat.com/errata/RHSA-2019:2737 SuSE Security Announcement: openSUSE-SU-2019:1484 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.html SuSE Security Announcement: openSUSE-SU-2019:1534 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.html SuSE Security Announcement: openSUSE-SU-2019:1664 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.html SuSE Security Announcement: openSUSE-SU-2019:1912 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00044.html SuSE Security Announcement: openSUSE-SU-2019:1916 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00038.html https://usn.ubuntu.com/3962-1/ https://usn.ubuntu.com/3991-1/ https://usn.ubuntu.com/3997-1/ https://usn.ubuntu.com/4080-1/ https://usn.ubuntu.com/4083-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-9797 https://bugzilla.mozilla.org/show_bug.cgi?id=1528909 https://www.mozilla.org/security/advisories/mfsa2019-07/ Common Vulnerability Exposure (CVE) ID: CVE-2019-5798 https://chromereleases.googleblog.com/2019/03/stable-channel-update-for-desktop_12.html https://crbug.com/883596 SuSE Security Announcement: openSUSE-SU-2019:1666 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html Common Vulnerability Exposure (CVE) ID: CVE-2019-9800 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1540166%2C1534593%2C1546327%2C1540136%2C1538736%2C1538042%2C1535612%2C1499719%2C1499108%2C1538619%2C1535194%2C1516325%2C1542324%2C1542097%2C1532465%2C1533554%2C1541580
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.