Issue Overview:
Thunderbird Nightly. Help us test the newest developments made to Thunderbird every day by using the unstable Nightly channel. Nightly is an unstable testing and development platform, make sure you back up important data regularly! Thunderbird is an email client from Mozilla, the organisation better known for the Firefox web browser which has a great deal to offer. In addition to handling multiple email accounts, the program can also be used to subscribe to RSS feeds and access online newsgroups and a new tabbed interface makes it easy to jump between individual emails or different aspects of the program. # Fixed in Thunderbird -35 Security Vulnerabilities fixed in Thunderbird 68.11 # Fixed in Thunderbird -26 Security Vulnerabilities fixed in Thunderbird 68.10.0 # Fixed in Thunderbird 68.9 2020-22 Security Vulnerabilities fixed in Thunderbird 68.9.0 # Fixed in Thunderbird 68.8. Thunderbird tracks the ESR schedule column per Thunderbird release info. Firefox 68.11; 78.1 2020-06-29 Firefox 80: Firefox 79 2020-06-30.
Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (CVE-2020-6463 )
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulnerability affects Firefox < 79, Firefox ESR < 68.11, Firefox ESR < 78.1, Thunderbird < 68.11, and Thunderbird < 78.1. (CVE-2020-15652 )
Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 79, Firefox ESR < 68.11, Firefox ESR < 78.1, Thunderbird < 68.11, and Thunderbird < 78.1. (CVE-2020-15659 )
Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream. (CVE-2020-6514 )
Security Vulnerabilities fixed in Firefox ESR 68.11
- Firefox ESR 68.11
#CVE-2020-15652: Potential leak of redirect targets when loading scripts in a worker
- Reporter
- Mikhail Oblozhikhin
- Impact
- high
Description
By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script.
References
#CVE-2020-6514: WebRTC data channel leaks internal address to peer
- Reporter
- Natalie Silvanovich of Google Project Zero
- Impact
- high
Description
WebRTC used the memory address of a class instance as a connection identifier.Unfortunately, this value is often transmitted to the peer, which allows bypassing ASLR.
References
#CVE-2020-6463: Use-after-free in ANGLE gl::Texture::onUnbindAsSamplerTexture
- Reporter
- Reported by Pawel Wylecial of REDTEAM.PL
- Impact
- moderate
Description
Crafted media files could lead to a race in texture caches, resulting in a use-after-free, memory corruption, and a potentially exploitable crash.
References
#CVE-2020-15650: Overwriting local files through malicious file picker application
- Reporter
- Pedro Oliveira
- Impact
- moderate
Description
Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile).
Note: This issue only affected Firefox for Android. Other operating systems are unaffected.
References
#CVE-2020-15649: Exfiltrating local files through malicious file picker application
- Reporter
- Andrea Palazzo, Pedro Oliveira
- Impact
- moderate
Description
Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked.
Note: This issue only affected Firefox for Android. Other operating systems are unaffected.
References
#CVE-2020-15659: Memory safety bugs fixed in Firefox 79 and Firefox ESR 68.11
- Reporter
- Mozilla developers
- Impact
- high
Description
Mozilla developers Jason Kratzer and Luke Wagner reported memory safety bugs present in Firefox 78 and Firefox ESR 68.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Thunderbird Setup 68.11.0
References