The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory storing the sound data is immediately freed, although the sound is still being played asynchronously, leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 60.5.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade thunderbird | Apr 29, 2019 | Apr 26, 2019 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird-bin. | Apr 3, 2019 | Apr 2, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 60.5Upgrade to the latest version of Mozilla Thunderbird | Mar 14, 2019 | Jan 29, 2019 |
| Oracle Solaris | — | Upgrade mail/thunderbird to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4Upgrade mail/thunderbird/plugin/thunderbird-lightning to version 60.6.1-11.4.9.0.1.2.0 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4Upgrade web/browser/firefox to version 68.6.0-11.4.21.0.1.69.0 on Solaris 11.4 | May 30, 2019 | Apr 26, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub