medium4.3
CVE-2020-6792
When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents.
Impact
When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird < 68.5.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Thunderbird | before 68.5.0 |
| Canonical | Ubuntu Linux | Versions 16.04, 18.04, 19.10 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.mozilla.org/show_bug.cgi?id=1609607
- https://security.gentoo.org/glsa/202003-10
- https://usn.ubuntu.com/4328-1/
- https://usn.ubuntu.com/4335-1/
- https://www.mozilla.org/security/advisories/mfsa2020-07/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1609607
- https://security.gentoo.org/glsa/202003-10
- https://usn.ubuntu.com/4328-1/
- https://usn.ubuntu.com/4335-1/
- https://www.mozilla.org/security/advisories/mfsa2020-07/