The version of Thunderbird installed on the remote Windows host is prior to 128.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-49 advisory.

  - An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the     `resource://devtools` origin.  This could allow them to access cross-origin JSON content. This access is     limited to same site documents by the Site Isolation feature on desktop clients, but full cross-origin     access is possible on Android versions. (CVE-2024-9394)

  - A compromised content process could have allowed for the arbitrary loading of cross-origin pages.
    (CVE-2024-9392)

  - An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the     `resource://pdf.js` origin.  This could allow them to access cross-origin PDF content. This access is     limited to same site documents by the Site Isolation feature on desktop clients, but full cross-origin     access is possible on Android versions. (CVE-2024-9393)

  - An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence     of navigational events. (CVE-2024-8900)

  - It is currently unknown if this issue is exploitable but a condition may arise where the structured clone     of certain objects could lead to memory corruption. (CVE-2024-9396)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Mozilla Thunderbird < 128.3

high Nessus Plugin ID 207985

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Nov 19, 2025, 7:37 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511190737
Version 1.2 Oct 14, 2024, 10:45 AM CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N") CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N") CVSSv2 score source (changed from "CVE-2024-8900" to "CVE-2024-9394") Plugin Feed: 202410141045
Version 1.1 Oct 1, 2024, 9:19 PM New Plugin Feed: 202410012119