download the new for mac Mozilla Thunderbird 115.6.0

Thunderbird was susceptible to a heap buffer overflow in nsTextFragment due to insufficient OOM handling.

#CVE-2023-6858: Heap buffer overflow in nsTextFragment Reporter Irvan Kurniawan Impact moderate Description This bug only affects Thunderbird on Unix-based operating systems (Android, Linux, MacOS). When resolving a symlink, a race may occur where the buffer passed to readlink may actually be smaller than necessary. #CVE-2023-6857: Symlinks may resolve to smaller than expected buffers Reporter Jed Davis Impact moderate Description This issue could allow an attacker to perform remote code execution and sandbox escape. The WebGL DrawElementsInstanced method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. #CVE-2023-6856: Heap-buffer-overflow affecting WebGL DrawElementsInstanced method with Mesa VM driver Reporter DoHyun Lee Impact high Description This could be used to give recipients the impression that a message was sent at a different date or time.

If present, Thunderbird did not compare the signature creation date with the message date and time, and displayed a valid signature despite a date or time mismatch.

The signature of a digitally signed S/MIME email message may optionally specify the signature creation date and time. #CVE-2023-50761: S/MIME signature accepted despite mismatching message date Reporter Marcus Brinkmann Impact high Description A digitally signed text from a different context, such as a signed GIT commit, could be used to spoof an email message. This is because the text was interpreted as a MIME message and the first paragraph was always treated as an email header section. When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text was never shown to the user. #CVE-2023-50762: Truncated signed text was shown with a valid OpenPGP signature Reporter Marcus Brinkmann Impact high Description Mozilla Foundation Security Advisory 2023-55 Security Vulnerabilities fixed in Thunderbird 115.6 Announced DecemImpact high Products Thunderbird Fixed in

Download the new for mac Mozilla Thunderbird 115.6.0