Homepage
About Snyk

Out-of-Bounds The advisory has been revoked - it doesn't affect any version of package thunderbird Open this link in a new tab

    Threat Intelligence

    EPSS 0.37% (73rd percentile)
Expand this section
NVD
8.8 high
Expand this section
Red Hat
8.8 high

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-UBUNTU1804-THUNDERBIRD-548569
  • published 11 Feb 2020
  • disclosed 2 Mar 2020
Report a new vulnerability Found a mistake?

Introduced: 11 Feb 2020

CVE-2020-6801 Open this link in a new tab
CWE-119 Open this link in a new tab

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:18.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream thunderbird package and not the thunderbird package as distributed by Ubuntu.

Mozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 73.