QID 375762

Date Published: 2021-08-16

QID 375762: Mozilla Thunderbird Multiple Vulnerabilities (MFSA2021-35)

Thunderbird is a free and open-source cross-platform email client developed for Windows, OS X, and Linux, with a mobile version for Android.

Affected Products:
Prior to Mozilla Thunderbird 78.13

QID Detection Logic (Authenticated):
This checks for vulnerable version of Thunderbird.

Successful exploitation of this vulnerability may allow an attacker to corrupt memory leading to a potentially exploitable crash.

  • CVSS V3 rated as Critical - 8.8 severity.
  • CVSS V2 rated as High - 6.8 severity.
  • Solution
    Vendor has released fix to address these vulnerabilities. Refer to MFSA2021-35
    Software Advisories
    Advisory ID Software Component Link
    MFSA2021-35 URL Logo www.mozilla.org/en-US/security/advisories/mfsa2021-35/