thunderbird
Page content
- Author: voroskoi
- Vulnerable: 1.5.0.12-1terminus1
- Unaffected: 1.5.0.13-1terminus1
Some vulnerabilities have been reported in Mozilla Thunderbird, which can potentially be exploited to compromise a user’s system. An error when registering a URI handler potentially allows to execute arbitrary code. Various errors in the Javascript engine can be exploited to cause memory corruption and potentially to execute arbitrary code. A vulnerability is caused due to an error within the handling of “about:blank” pages loaded by chrome in an addon. This can be exploited to execute script code under chrome privileges by e.g. clicking on a link opened in an “about:blank” window created and populated in a certain ways by an addon.
- Bug Tracker URL: http://bugs.frugalware.org/task/2264