Gentoo update for Mozilla Thunderbird

1) Spoofing attack

EUVDB-ID: #VU75874

Risk: Medium

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-32205

CWE-ID: CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to incorrect processing of user-supplied data. A remote attacker can obscure browser prompts and perform spoofing attack.

Mitigation

Update the affected packages.
mail-client/thunderbird to version: 102.12
mail-client/thunderbird-bin to version: 102.12

Vulnerable software versions

Gentoo Linux: All versions

mail-client/thunderbird-bin: before 102.12

mail-client/thunderbird: before 102.12

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird-bin:*:*:*:*:*:gentoo_linux:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/202312-03

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Out-of-bounds read

EUVDB-ID: #VU75875

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-32206

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in the RLBox Expat driver. A remote attacker can trick the victim to open a specially crafted website, trigger an out-of-bounds read error and crash the browser.

Mitigation

Update the affected packages.
mail-client/thunderbird to version: 102.12
mail-client/thunderbird-bin to version: 102.12

Vulnerable software versions

Gentoo Linux: All versions

mail-client/thunderbird-bin: before 102.12

mail-client/thunderbird: before 102.12

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird-bin:*:*:*:*:*:gentoo_linux:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/202312-03

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Security features bypass

EUVDB-ID: #VU75876

Risk: Medium

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-32207

CWE-ID: CWE-254 - Security Features

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform clickjacking attack.

The vulnerability exists due to a missing delay in popup notifications. A remote attacker can trick a victim into granting permissions.

Mitigation

Update the affected packages.
mail-client/thunderbird to version: 102.12
mail-client/thunderbird-bin to version: 102.12

Vulnerable software versions

Gentoo Linux: All versions

mail-client/thunderbird-bin: before 102.12

mail-client/thunderbird: before 102.12

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird-bin:*:*:*:*:*:gentoo_linux:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/202312-03

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Type Confusion

EUVDB-ID: #VU75880

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-32211

CWE-ID: CWE-843 - Type confusion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a type confusion error when processing HTML content. A remote attacker can trick the victim to open a specially crafted website, trigger a type confusion error and crash the browser.

Mitigation

Update the affected packages.
mail-client/thunderbird to version: 102.12
mail-client/thunderbird-bin to version: 102.12

Vulnerable software versions

Gentoo Linux: All versions

mail-client/thunderbird-bin: before 102.12

mail-client/thunderbird: before 102.12

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird-bin:*:*:*:*:*:gentoo_linux:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/202312-03

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Spoofing attack

EUVDB-ID: #VU75881

Risk: Medium

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-32212

CWE-ID: CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to incorrect processing of user-supplied data. A remote attacker can spoof the address bar using the datalist element.

Mitigation

Update the affected packages.
mail-client/thunderbird to version: 102.12
mail-client/thunderbird-bin to version: 102.12

Vulnerable software versions

Gentoo Linux: All versions

mail-client/thunderbird-bin: before 102.12

mail-client/thunderbird: before 102.12

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird-bin:*:*:*:*:*:gentoo_linux:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/202312-03

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Buffer overflow

EUVDB-ID: #VU75882

Risk: Medium

CVSSv4.0: 4.8 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-32213

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within FileReader::DoReadData() when reading a file. A remote attacker can trigger memory corruption and execute arbitrary code on the target system.

Mitigation

Update the affected packages.
mail-client/thunderbird to version: 102.12
mail-client/thunderbird-bin to version: 102.12

Vulnerable software versions

Gentoo Linux: All versions

mail-client/thunderbird-bin: before 102.12

mail-client/thunderbird: before 102.12

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird-bin:*:*:*:*:*:gentoo_linux:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/202312-03

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Improper Authorization in Handler for Custom URL Scheme

EUVDB-ID: #VU75883

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-32214

CWE-ID: CWE-939 - Improper Authorization in Handler for Custom URL Scheme

Exploit availability: No

Description

The vulnerability allows a remote attacker to crash the browser.

The vulnerability exists due to incorrect processing of the ms-cxh and ms-cxh-full handlers. A remote attacker can trick the victim to visit a specially crafted web page and crash the browser.

Note, the vulnerability affects Windows installations only.

Mitigation

Update the affected packages.
mail-client/thunderbird to version: 102.12
mail-client/thunderbird-bin to version: 102.12

Vulnerable software versions

Gentoo Linux: All versions

mail-client/thunderbird-bin: before 102.12

mail-client/thunderbird: before 102.12

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird-bin:*:*:*:*:*:gentoo_linux:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/202312-03

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Buffer overflow

EUVDB-ID: #VU75884

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-32215

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing HTML content. A remote attacker can trick the victim to open a specially crafted website, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Update the affected packages.
mail-client/thunderbird to version: 102.12
mail-client/thunderbird-bin to version: 102.12

Vulnerable software versions

Gentoo Linux: All versions

mail-client/thunderbird-bin: before 102.12

mail-client/thunderbird: before 102.12

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird-bin:*:*:*:*:*:gentoo_linux:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/202312-03

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Spoofing attack

EUVDB-ID: #VU77002

Risk: Medium

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-34414

CWE-ID: CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to incorrect processing of user-supplied data when displaying certificate exceptions. The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks that exploit human response time delays. If a malicious page elicited user clicks in precise locations immediately before navigating to a site with a certificate error and made the renderer extremely busy at the same time, it could create a gap between when the error page was loaded and when the display actually refreshed.

With the right timing the elicited clicks could land in that gap and activate the button that overrides the certificate error for that site.

Mitigation

Update the affected packages.
mail-client/thunderbird to version: 102.12
mail-client/thunderbird-bin to version: 102.12

Vulnerable software versions

Gentoo Linux: All versions

mail-client/thunderbird-bin: before 102.12

mail-client/thunderbird: before 102.12

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird-bin:*:*:*:*:*:gentoo_linux:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/202312-03

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Buffer overflow

EUVDB-ID: #VU77004

Risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2023-34416

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when processing HTML content. A remote attacker can create a specially crafted website, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Update the affected packages.
mail-client/thunderbird to version: 102.12
mail-client/thunderbird-bin to version: 102.12

Vulnerable software versions

Gentoo Linux: All versions

mail-client/thunderbird-bin: before 102.12

mail-client/thunderbird: before 102.12

CPE2.3

• cpe:2.3:o:gentoo:gentoo_linux:*:*:*:*:*:*:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird-bin:*:*:*:*:*:gentoo_linux:*:*
• cpe:2.3:o:gentoo:mail-client_thunderbird:*:*:*:*:*:gentoo_linux:*:*

External links

https://security.gentoo.org/glsa/202312-03

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.