8.8
CVSSv3

CVE-2022-0566

Published: 22/12/2022 Updated: 29/12/2022
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

It may be possible for an malicious user to craft an email message that causes Thunderbird to perform an out-of-bounds write of one byte when processing the message. This vulnerability affects Thunderbird < 91.6.1.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla thunderbird

Vendor Advisories

Several security issues were fixed in Thunderbird ...
An out-of-bounds write was discovered in Thunderbird, which could be triggered via a malformed email message For the oldstable distribution (buster), this problem has been fixed in version 1:9161-1~deb10u1 For the stable distribution (bullseye), this problem has been fixed in version 1:9161-1~deb11u1 We recommend that you upgrade your thunde ...
Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for thunderbird is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as h ...
Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for thunderbird is now available for Red Hat Enterprise Linux 81 Update Services for SAP SolutionsRed Hat Product ...
Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for thunderbird is now available for Red Hat Enterprise Linux 84 Extended Update SupportRed Hat Product Security ...
Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for thunderbird is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as h ...
Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for thunderbird is now available for Red Hat Enterprise Linux 82 Extended Update SupportRed Hat Product Security ...
A flaw was found in Thunderbird The vulnerability occurs due to an out-of-bounds write of one byte when processing the message This flaw allows an attacker to craft an email message that causes Thunderbird to perform an out-of-bounds write (CVE-2022-0566) A flaw was found in expat Passing malformed 2- and 3-byte UTF-8 sequences (for example, fr ...
Mozilla Foundation Security Advisory 2022-07 Security Vulnerabilities fixed in Thunderbird 9161 Announced February 15, 2022 Impact high Products Thunderbird Fixed in Thunderbird 9161 ...