CVE:CVE-2019-11764
CNNVD:CNNVD-201910-1298
Mozilla Thunderbird是美国Mozilla基金会的一套从Mozilla Application Suite独立出来的电子邮件客户端软件。该软件支持IMAP、POP邮件协议以及HTML邮件格式。
Mozilla Firefox 70之前版本、Mozilla Firefox ESR 68.2之前版本和Thunderbird 68.2之前版本中存在缓冲区错误漏洞。攻击者可利用该漏洞造成内存损坏并可能运行任意代码。
solution:Upgrade mozilla firefox to a higher version than 70.0,and avoid the version (,70.0); Upgrade mozilla firefox_esr to a higher version than 68.2,and avoid the version (,68.2); Upgrade mozilla thunderbird to a higher version than 68.2,and avoid the version (,68.2); Upgrade canonical ubuntu_linux to a higher version than 16.04,and avoid the version 16.04