The version of Thunderbird installed on the remote Mac OS X host is prior to 38.4. It is, therefore, affected by multiple vulnerabilities :

  - Multiple memory corruption issues exist due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit these issues, via a     specially crafted web page, to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2015-4513, CVE-2015-4514)

  - An unspecified use-after-poison flaw exists in the     sec_asn1d_parse_leaf() function in Mozilla Network     Security Services (NSS) due to improper restriction of     access to an unspecified data structure. A remote     attacker can exploit this, via crafted OCTET STRING     data, to cause a denial of service condition or the     execution of arbitrary code. (CVE-2015-7181)

  - A heap buffer overflow condition exists in the ASN.1     decoder in Mozilla Network Security Services (NSS) due     to improper validation of user-supplied input. A remote     attacker can exploit this, via crafted OCTET STRING     data, to cause a denial of service condition or the     execution of arbitrary code. (CVE-2015-7182)

  - An integer overflow condition exists in the     PL_ARENA_ALLOCATE macro in the Netscape Portable Runtime     (NSPR) due to improper validation of user-supplied     input. A remote attacker can exploit this to corrupt     memory, resulting in a denial of service condition or     the execution of arbitrary code. (CVE-2015-7183)

  - A same-origin bypass vulnerability exists due to     improper handling of trailing whitespaces in the IP     address hostname. A remote attacker can exploit this, by     appending whitespace characters to an IP address string,     to bypass the same-origin policy and conduct a     cross-site scripting attack. (CVE-2015-7188)

  - A race condition exists in the JPEGEncoder() function     due to improper validation of user-supplied input when     handling canvas elements. A remote attacker can exploit     this to cause a heap-based buffer overflow, resulting in     a denial of service condition or the execution of     arbitrary code. (CVE-2015-7189)

  - A cross-origin resource sharing (CORS) request bypass     vulnerability exists due to improper implementation of     the CORS cross-origin request algorithm for the POST     method in situations involving an unspecified     Content-Type header manipulation. A remote attacker can     exploit this to perform a simple request instead of a     'preflight' request. (CVE-2015-7193)

  - A buffer underflow condition exists in libjar due to     improper validation of user-supplied input when handling     ZIP archives. A remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2015-7194)

  - A security bypass vulnerability exists due to improperly     controlling the ability of a web worker to create a     WebSocket object in the WebSocketImpl::Init() method.
    A remote attacker can exploit this to bypass intended     mixed-content restrictions. (CVE-2015-7197)

  - A buffer overflow condition exists in TextureStorage11     in ANGLE due to improper validation of user-supplied     input. A remote attacker can exploit this to cause a     denial of service condition or the execution of     arbitrary code. (CVE-2015-7198)

  - A flaw exists in the AddWeightedPathSegLists() function     due to missing return value checks during SVG rendering.
    A remote attacker can exploit this, via a crafted SVG     document, to corrupt memory, resulting in a denial of     service condition or the execution of arbitrary code.
    (CVE-2015-7199)

  - A flaw exists in the CryptoKey interface implementation     due to missing status checks. A remote attacker can     exploit this to make changes to cryptographic keys and     execute arbitrary code. (CVE-2015-7200)

The version of Thunderbird installed on the remote Windows host is prior to 38.4. It is, therefore, affected by multiple vulnerabilities :

  - Multiple memory corruption issues exist due to improper     validation of user-supplied input. An unauthenticated,     remote attacker can exploit these issues, via a     specially crafted web page, to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2015-4513, CVE-2015-4514)

  - An unspecified use-after-poison flaw exists in the     sec_asn1d_parse_leaf() function in Mozilla Network     Security Services (NSS) due to improper restriction of     access to an unspecified data structure. A remote     attacker can exploit this, via crafted OCTET STRING     data, to cause a denial of service condition or the     execution of arbitrary code. (CVE-2015-7181)

  - A heap buffer overflow condition exists in the ASN.1     decoder in Mozilla Network Security Services (NSS) due     to improper validation of user-supplied input. A remote     attacker can exploit this, via crafted OCTET STRING     data, to cause a denial of service condition or the     execution of arbitrary code. (CVE-2015-7182)

  - An integer overflow condition exists in the     PL_ARENA_ALLOCATE macro in the Netscape Portable Runtime     (NSPR) due to improper validation of user-supplied     input. A remote attacker can exploit this to corrupt     memory, resulting in a denial of service condition or     the execution of arbitrary code. (CVE-2015-7183)

  - A same-origin bypass vulnerability exists due to     improper handling of trailing whitespaces in the IP     address hostname. A remote attacker can exploit this, by     appending whitespace characters to an IP address string,     to bypass the same-origin policy and conduct a     cross-site scripting attack. (CVE-2015-7188)

  - A race condition exists in the JPEGEncoder() function     due to improper validation of user-supplied input when     handling canvas elements. A remote attacker can exploit     this to cause a heap-based buffer overflow, resulting in     a denial of service condition or the execution of     arbitrary code. (CVE-2015-7189)

  - A cross-origin resource sharing (CORS) request bypass     vulnerability exists due to improper implementation of     the CORS cross-origin request algorithm for the POST     method in situations involving an unspecified     Content-Type header manipulation. A remote attacker can     exploit this to perform a simple request instead of a     'preflight' request. (CVE-2015-7193)

  - A buffer underflow condition exists in libjar due to     improper validation of user-supplied input when handling     ZIP archives. A remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2015-7194)

  - A security bypass vulnerability exists due to improperly     controlling the ability of a web worker to create a     WebSocket object in the WebSocketImpl::Init() method.
    A remote attacker can exploit this to bypass intended     mixed-content restrictions. (CVE-2015-7197)

  - A buffer overflow condition exists in TextureStorage11     in ANGLE due to improper validation of user-supplied     input. A remote attacker can exploit this to cause a     denial of service condition or the execution of     arbitrary code. (CVE-2015-7198)

  - A flaw exists in the AddWeightedPathSegLists() function     due to missing return value checks during SVG rendering.
    A remote attacker can exploit this, via a crafted SVG     document, to corrupt memory, resulting in a denial of     service condition or the execution of arbitrary code.
    (CVE-2015-7199)

  - A flaw exists in the CryptoKey interface implementation     due to missing status checks. A remote attacker can     exploit this to make changes to cryptographic keys and     execute arbitrary code. (CVE-2015-7200)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
87109	Mozilla Thunderbird < 38.4 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2015/11/30	2019/11/20	high
87110	Mozilla Thunderbird < 38.4 Multiple Vulnerabilities	Nessus	Windows	2015/11/30	2019/11/20	high

检测

插件搜索

high

high