USN-2859-1: Thunderbird vulnerabilities
Ubuntu Security Notice USN-2859-1 13th January, 2016 thunderbird vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 15.10 Ubuntu 15.04 Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary Several security issues were fixed in Thunderbird. Software description thunderbird – Mozilla Open Source mail and newsgroup client Details Andrei Vaida, Jesse Ruderman, Bob Clary, and Jesse Rudermandiscovered multiple memory safety issues in Thunderbird. If a user weretricked in to opening a specially crafted message, an attacker couldpotentially exploit these to cause a denial of service via applicationcrash, or execute arbitrary code with the privileges of the user invokingThunderbird. (CVE-2015-7201) Ronald Crane discovered a buffer overflow through code inspection. If auser were tricked in to opening a specially crafted website in a browsingcontext, an attacker could potentially exploit this to cause a denial ofservice via application crash, or execute [ more… ]