Aller au contenu
Non notée

CVE-2020-26970 When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended…

Description

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable. This vulnerability affects Thunderbird < 78.5.1.

Produits et versions touchés

Produit Versions touchées Corrigé en
Thunderbird 78.5 premières → < 78.5.1 78.5.1
Les 1713 CVE de Thunderbird →
Suivre cette CVE