The version of Thunderbird installed on the remote Windows host is prior to 78.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-29 advisory.

  - Mozilla developers and community members Bob Clary, Benjamin Bouvier, Calixte Denizet, Christian Holler     reported memory safety bugs present in Thunderbird 77. Some of these bugs showed evidence of memory     corruption and we presume that with enough effort some of these could have been exploited to run arbitrary     code. (CVE-2020-12426)

  - When <code>%2F</code> was present in a manifest URL, Thunderbird's AppCache behavior may have become     confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used     to service requests for the top level directory. (CVE-2020-12415)

  - A <code>VideoStreamEncoder</code> may have been freed in a race condition with     <code>VideoBroadcaster::AddOrUpdateSink</code>, resulting in a use-after-free, memory corruption, and a     potentially exploitable crash. (CVE-2020-12416)

  - Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. Note: this issue only affects Firefox     on ARM64 platforms. (CVE-2020-12417)

  - Manipulating individual parts of a  URL object could have caused an out-of-bounds read, leaking process     memory to malicious JavaScript. (CVE-2020-12418)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202007-10 (Mozilla Firefox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox. Please       review the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:3038 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 68.10.0.

    Security Fix(es):

    * Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64 (CVE-2020-12417)

    * Mozilla: Information disclosure due to manipulated URL object (CVE-2020-12418)

    * Mozilla: Use-after-free in nsGlobalWindowInner (CVE-2020-12419)

    * Mozilla: Use-After-Free when trying to connect to a STUN server (CVE-2020-12420)

    * Mozilla: Add-On updates did not respect the same certificate trust rules as software updates     (CVE-2020-12421)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2020:2828 advisory.

  - Mozilla: Memory corruption due to missing sign-extension for ValueTags on ARM64 (CVE-2020-12417)

  - Mozilla: Information disclosure due to manipulated URL object (CVE-2020-12418)

  - Mozilla: Use-after-free in nsGlobalWindowInner (CVE-2020-12419)

  - Mozilla: Use-After-Free when trying to connect to a STUN server (CVE-2020-12420)

  - Mozilla: Add-On updates did not respect the same certificate trust rules as software updates     (CVE-2020-12421)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of thunderbird installed on the remote host is prior to 68.10.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-1945 advisory.

    The Mozilla Foundation Security Advisory describes this flaw as:

    Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. (CVE-2020-12417)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process     memory to malicious JavaScript. (CVE-2020-12418)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When processing callbacks that occurred during window flushing in the parent process, the associated     window may die; causing a use-after-free condition. This could have led to memory corruption and a     potentially exploitable crash. (CVE-2020-12419)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer,     leading to memory corruption and a potentially exploitable crash. (CVE-2020-12420)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even     if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date     silently without notification to the user. (CVE-2020-12421)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-225:05 advisory.

    * Mozilla: Information disclosure due to manipulated URL object (CVE-2020-12418)
    * Mozilla: Use-after-free in nsGlobalWindowInner (CVE-2020-12419)
    * Mozilla: Use-After-Free when trying to connect to a STUN server (CVE-2020-12420)
    * Mozilla: Add-On updates did not respect the same certificate trust rules as software updates     (CVE-2020-12421)     CVE-2020-12418     Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process     memory to malicious JavaScript. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and     Thunderbird < 68.10.0.
    CVE-2020-12419     When processing callbacks that occurred during window flushing in the parent process, the associated     window may die; causing a use-after-free condition. This could have led to memory corruption and a     potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and     Thunderbird < 68.10.0.
    CVE-2020-12420     When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer,     leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR <     68.10, Firefox < 78, and Thunderbird < 68.10.0.
    CVE-2020-12421     When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even     if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date     silently without notification to the user. This vulnerability affects Firefox ESR < 68.10, Firefox < 78,     and Thunderbird < 68.10.0.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 68.10.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-26 advisory.

  - When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer,     leading to memory corruption and a potentially exploitable crash. (CVE-2020-12420)

  - Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. Note: this issue only affects Firefox     on ARM64 platforms. (CVE-2020-12417)

  - Manipulating individual parts of a  URL object could have caused an out-of-bounds read, leaking process     memory to malicious JavaScript. (CVE-2020-12418)

  - When processing callbacks that occurred during window flushing in the parent process, the associated     window may die; causing a use-after-free condition. This could have led to memory corruption and a     potentially exploitable crash. (CVE-2020-12419)

  - If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the     Microsoft Exchange autodiscovery mechanism, and the attacker sends a crafted response, then Thunderbird     sends username and password over https to a server controlled by the attacker. (CVE-2020-15646)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 68.10.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-26 advisory.

  - When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer,     leading to memory corruption and a potentially exploitable crash. (CVE-2020-12420)

  - Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. Note: this issue only affects Firefox     on ARM64 platforms. (CVE-2020-12417)

  - Manipulating individual parts of a  URL object could have caused an out-of-bounds read, leaking process     memory to malicious JavaScript. (CVE-2020-12418)

  - When processing callbacks that occurred during window flushing in the parent process, the associated     window may die; causing a use-after-free condition. This could have led to memory corruption and a     potentially exploitable crash. (CVE-2020-12419)

  - If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the     Microsoft Exchange autodiscovery mechanism, and the attacker sends a crafted response, then Thunderbird     sends username and password over https to a server controlled by the attacker. (CVE-2020-15646)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - Mozilla: Information disclosure due to manipulated URL     object (CVE-2020-12418)

  - Mozilla: Use-after-free in nsGlobalWindowInner     (CVE-2020-12419)

  - Mozilla: Use-After-Free when trying to connect to a STUN     server (CVE-2020-12420)

  - Mozilla: Add-On updates did not respect the same     certificate trust rules as software updates     (CVE-2020-12421)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-2828 advisory.

    [68.10.0-1.0.1.el8_2]
    - Rebuild to pickup Oracle default bookmarks [Orabug: 30069264]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file
    - Remove upstream references [Orabug: 30530527]

    [68.10.0-1]
    - Update to 68.10.0 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4421-1 advisory.

    Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially     crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of     service, obtain sensitive information, or execute arbtirary code. (CVE-2020-12405, CVE-2020-12406,     CVE-2020-12410, CVE-2020-12417, CVE-2020-12418, CVE-2020-12419, CVE-2020-12420)

    It was discovered that Thunderbird would continue an unencrypted connection when configured to use     STARTTLS for IMAP if the server responded with PREAUTH. A remote attacker could potentially exploit this     to perform a person-in-the-middle attack in order to obtain sensitive information. (CVE-2020-12398)

    It was discovered that NSS showed timing differences when performing DSA signatures. An attacker could     potentially exploit this to obtain private keys using a timing attack. (CVE-2020-12399)

    It was discovered that when performing add-on updates, certificate chains not terminating with built-in     roots were silently rejected. This could result in add-ons becoming outdated. (CVE-2020-12421)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for MozillaThunderbird to version 68.10.0 ESR fixes the following issues :

  - CVE-2020-12417: Memory corruption due to missing     sign-extension for ValueTags on ARM64 (bsc#1173576).

  - CVE-2020-12418: Information disclosure due to     manipulated URL object (bsc#1173576).

  - CVE-2020-12419: Use-after-free in nsGlobalWindowInner     (bsc#1173576).

  - CVE-2020-12420: Use-After-Free when trying to connect to     a STUN server (bsc#1173576).

  - CVE-2020-12421: Add-On updates did not respect the same     certificate trust rules as software updates     (bsc#1173576).

This update was imported from the SUSE:SLE-15:Update update project.

This update for MozillaFirefox to version 78.0.1 ESR fixes the following issues :

Security issues fixed :

  - CVE-2020-12415: AppCache manifest poisoning due to url     encoded character processing (bsc#1173576).

  - CVE-2020-12416: Use-after-free in WebRTC     VideoBroadcaster (bsc#1173576).

  - CVE-2020-12417: Memory corruption due to missing     sign-extension for ValueTags on ARM64 (bsc#1173576).

  - CVE-2020-12418: Information disclosure due to     manipulated URL object (bsc#1173576).

  - CVE-2020-12419: Use-after-free in nsGlobalWindowInner     (bsc#1173576).

  - CVE-2020-12420: Use-After-Free when trying to connect to     a STUN server (bsc#1173576).

  - CVE-2020-12402: RSA Key Generation vulnerable to     side-channel attack (bsc#1173576).

  - CVE-2020-12421: Add-On updates did not respect the same     certificate trust rules as software updates     (bsc#1173576).

  - CVE-2020-12422: Integer overflow in     nsJPEGEncoder::emptyOutputBuffer (bsc#1173576).

  - CVE-2020-12423: DLL Hijacking due to searching %PATH%     for a library (bsc#1173576).

  - CVE-2020-12424: WebRTC permission prompt could have been     bypassed by a compromised content process (bsc#1173576).

  - CVE-2020-12425: Out of bound read in Date.parse()     (bsc#1173576).

  - CVE-2020-12426: Memory safety bugs fixed in Firefox 78     (bsc#1173576).

  - FIPS: MozillaFirefox: allow     /proc/sys/crypto/fips_enabled (bsc#1167231).

Non-security issues fixed :

  - Fixed interaction with freetype6 (bsc#1173613).

This update was imported from the SUSE:SLE-15:Update update project.

The version of thunderbird installed on the remote host is prior to 68.9.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1468 advisory.

    The Mozilla Foundation Security Advisory describes this flaw as:

    If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response,     then Thunderbird will continue with an unencrypted connection, causing email data to be sent without     protection. (CVE-2020-12398)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a     potentially exploitable crash. (CVE-2020-12405)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Mozilla developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting     in a crash. We presume that with enough effort that it could be exploited to run arbitrary code.
    (CVE-2020-12406)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. (CVE-2020-12410)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. (CVE-2020-12417)

    The Mozilla Foundation Security Advisory describes this flaw as:

    Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process     memory to malicious JavaScript. (CVE-2020-12418)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When processing callbacks that occurred during window flushing in the parent process, the associated     window may die; causing a use-after-free condition. This could have led to memory corruption and a     potentially exploitable crash. (CVE-2020-12419)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer,     leading to memory corruption and a potentially exploitable crash. (CVE-2020-12420)

    The Mozilla Foundation Security Advisory describes this flaw as:

    When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even     if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date     silently without notification to the user. (CVE-2020-12421)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2020-3038 advisory.

    [68.10.0-1.0.1.el8_2]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [68.10.0-1]
    - Update to 68.10.0 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - Mozilla developers reported memory safety bugs present in Firefox 76 and Firefox ESR 68.8. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and     Firefox ESR < 68.9. (CVE-2020-12410)

  - Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting     in a crash. We presume that with enough effort that it could be exploited to run arbitrary code. This     vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox ESR < 68.9. (CVE-2020-12406)

  - When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a     potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firefox     ESR < 68.9. (CVE-2020-12405)

  - If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response,     then Thunderbird will continue with an unencrypted connection, causing email data to be sent without     protection. This vulnerability affects Thunderbird < 68.9.0. (CVE-2020-12398)

  - Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier,     resulting in memory corruption and a potentially exploitable crash. *Note: this issue only affects Firefox     on ARM64 platforms.* This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird <     68.10.0. (CVE-2020-12417)

  - Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process     memory to malicious JavaScript. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and     Thunderbird < 68.10.0. (CVE-2020-12418)

  - When processing callbacks that occurred during window flushing in the parent process, the associated     window may die; causing a use-after-free condition. This could have led to memory corruption and a     potentially exploitable crash. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and     Thunderbird < 68.10.0. (CVE-2020-12419)

  - When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer,     leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR <     68.10, Firefox < 78, and Thunderbird < 68.10.0. (CVE-2020-12420)

  - When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even     if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date     silently without notification to the user. This vulnerability affects Firefox ESR < 68.10, Firefox < 78,     and Thunderbird < 68.10.0. (CVE-2020-12421)

  - If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the     Microsoft Exchange autodiscovery mechanism, and the attacker sends a crafted response, then Thunderbird     sends username and password over https to a server controlled by the attacker. This vulnerability affects     Thunderbird < 68.10.0. (CVE-2020-15646)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
138589	Mozilla Thunderbird < 78.0	Nessus	Windows	2020/7/17	2025/11/18	high
138933	GLSA-202007-10 : Mozilla Firefox: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2020/7/27	2024/2/28	high
139041	RHEL 8 : thunderbird (RHSA-2020:3038)	Nessus	Red Hat Local Security Checks	2020/7/28	2024/11/7	high
146025	CentOS 8 : firefox (CESA-2020:2828)	Nessus	CentOS Local Security Checks	2021/2/1	2024/1/24	high
171825	Amazon Linux 2 : thunderbird (ALAS-2023-1945)	Nessus	Amazon Linux Local Security Checks	2023/2/23	2024/12/11	high
294530	MiracleLinux 4 : thunderbird-68.10.0-1.AXS4 (AXSA:2020-225:05)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
138065	Debian DSA-4713-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	2020/7/2	2024/3/4	high
138095	Mozilla Thunderbird < 68.10.0	Nessus	MacOS X Local Security Checks	2020/7/3	2025/11/18	high
138096	Mozilla Thunderbird < 68.10.0	Nessus	Windows	2020/7/3	2025/11/18	high
138205	Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20200707)	Nessus	Scientific Linux Local Security Checks	2020/7/8	2024/3/1	high
138246	Oracle Linux 8 : firefox (ELSA-2020-2828)	Nessus	Oracle Linux Local Security Checks	2020/7/9	2024/10/23	high
138326	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Thunderbird vulnerabilities (USN-4421-1)	Nessus	Ubuntu Local Security Checks	2020/7/9	2024/8/27	high
138746	openSUSE Security Update : MozillaThunderbird (openSUSE-2020-982)	Nessus	SuSE Local Security Checks	2020/7/20	2024/2/29	high
138747	openSUSE Security Update : MozillaFirefox (openSUSE-2020-983)	Nessus	SuSE Local Security Checks	2020/7/20	2024/2/29	high
138857	Amazon Linux 2 : thunderbird (ALAS-2020-1468)	Nessus	Amazon Linux Local Security Checks	2020/7/23	2025/4/11	high
138976	Oracle Linux 8 : thunderbird (ELSA-2020-3038)	Nessus	Oracle Linux Local Security Checks	2020/7/27	2024/10/22	high
144001	NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2020-0083)	Nessus	NewStart CGSL Local Security Checks	2020/12/9	2024/2/2	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high