Security Fix(es) :

Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 (CVE-2020-6800) Mozilla: Out-of-bounds read when processing certain email messages (CVE-2020-6793) Mozilla: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords (CVE-2020-6794) Mozilla: Crash processing S/MIME messages with multiple signatures (CVE-2020-6795) Mozilla: Incorrect parsing of template tag could result in JavaScript injection (CVE-2020-6798) Mozilla: Message ID calculation was based on uninitialized data (CVE-2020-6792)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:0577 advisory.

  - Mozilla: Message ID calculation was based on uninitialized data (CVE-2020-6792)

  - Mozilla: Out-of-bounds read when processing certain email messages (CVE-2020-6793)

  - Mozilla: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored     passwords (CVE-2020-6794)

  - Mozilla: Crash processing S/MIME messages with multiple signatures (CVE-2020-6795)

  - Mozilla: Incorrect parsing of template tag could result in JavaScript injection (CVE-2020-6798)

  - Mozilla: Memory safety bugs fixed in Firefox 73 and Firefox ESR 68.5 (CVE-2020-6800)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
134071	Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20200224)	Nessus	Scientific Linux Local Security Checks	2/26/2020	3/26/2024	high
145993	CentOS 8 : thunderbird (CESA-2020:0577)	Nessus	CentOS Local Security Checks	2/1/2021	1/24/2024	high
147312	NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0002)	Nessus	NewStart CGSL Local Security Checks	3/10/2021	4/25/2023	critical

Detections

Analytics

Plugins Search

high

high

critical