SB2019112704 - Ubuntu update for Thunderbird
Published: November 27, 2019 Updated: January 17, 2022
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 10 secuirty vulnerabilities.
1) Protection mechanism failure (CVE-ID: CVE-2019-11763)
The vulnerability allows a remote attacker to perform XSS attacks.
The vulnerability exists due to the way Firefox processes HTML entities. A remote attacker can create a specially crafted web page and make the browser treat HTML comment text as HTML, which could have led to XSS in a web application.
2) Buffer overflow (CVE-ID: CVE-2019-11764)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTML content. A remote attacker can create a specially crafted website, trick the victim into visiting it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
3) Out-of-bounds read (CVE-ID: CVE-2019-15903)
The vulnerability allows a remote attacker to gain access to potentially sensitive information or perform denial of service (DoS) attack.
The vulnerability exists due to a boundary error when processing XML documents within the expat library. A remote attacker can create a specially crafted XML file, pass it to the affected application, trigger out-of-bounds read error and read contents of memory on the system or crash the affected application.
4) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2019-11762)
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to the way Firefox processes two same-origin documents that set document.domain differently to become cross-origin. A remote attacker can create a specially crafted web page, trick the victim into visiting it and gain access to potentially sensitive information, as it is possible to call arbitrary DOM methods/getters/setters on the now-cross-origin window.
5) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2019-11761)
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to the application allows access to a privileged JSONView object that had been cloned into content. A remote attacker can create a specially crafted web page, trick the victim into visiting it and gain access to potentially sensitive information.
6) Use-after-free (CVE-ID: CVE-2019-11757)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error when storing a value in IndexedDB. A remote attacker can create a specially crafted web page, trick the victim into visiting it, trigger a use-after-free error and execute arbitrary code on the target system.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
7) Buffer overflow (CVE-ID: CVE-2019-11758)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTML content with installed 360 Total Security. A remote attacker can create a specially crafted web page, trick the victim into visiting it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
8) Stack-based buffer overflow (CVE-ID: CVE-2019-11759)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error when processing HMAC data. A remote attacker can create a specially crafted web page that causes 4 bytes of HMAC output to be written past the end of a buffer stored on the stack, trick the victim into visiting it and crash the application.
9) Stack-based buffer overflow (CVE-ID: CVE-2019-11760)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error in nrappkit when doing WebRTC signaling. A remote attacker can create a specially crafted web page, trick the victim into visiting it, trigger a stack-based buffer overflow and execute arbitrary code on the target system.
10) Spoofing attack (CVE-ID: CVE-2019-11755)
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to incorrect processing of S/MIME messages, consisting of an inner encryption layer and an outer SignedData layeruser-supplied data. A remote attacker can create a specially crafted message and make it look as it was signed with a valid signature. Although the signer might have had no access to the contents of the encrypted message, and might have stripped a different signature from the encrypted message.
Remediation
Install update from vendor's website.