The remote NewStart CGSL host, running version MAIN 6.01, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - By encoding Unicode whitespace characters within the     From email header, an attacker can spoof the sender     email address that Thunderbird displays. This     vulnerability affects Thunderbird < 68.8.0.
    (CVE-2020-12397)

  - Under certain conditions, when running the nsDocShell     destructor, a race condition can cause a use-after-free.
    We are aware of targeted attacks in the wild abusing     this flaw. This vulnerability affects Thunderbird <     68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.
    (CVE-2020-6819)

  - Under certain conditions, when handling a     ReadableStream, a race condition can cause a use-after-     free. We are aware of targeted attacks in the wild     abusing this flaw. This vulnerability affects     Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR     < 68.6.1. (CVE-2020-6820)

  - When reading from areas partially or fully outside the     source resource with WebGL's     copyTexSubImage method, the specification     requires the returned values be zero. Previously, this     memory was uninitialized, leading to potentially     sensitive data disclosure. This vulnerability affects     Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox <     75. (CVE-2020-6821)

  - On 32-bit builds, an out of bounds write could have     occurred when processing an image larger than 4 GB in     GMPDecodeData. It is possible that with     enough effort this could have been exploited to run     arbitrary code. This vulnerability affects Thunderbird <     68.7.0, Firefox ESR < 68.7, and Firefox < 75.
    (CVE-2020-6822)

  - Mozilla developers and community members Tyson Smith and     Christian Holler reported memory safety bugs present in     Firefox 74 and Firefox ESR 68.6. Some of these bugs     showed evidence of memory corruption and we presume that     with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability     affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and     Firefox < 75. (CVE-2020-6825)

  - A race condition when running shutdown code for Web     Worker led to a use-after-free vulnerability. This     resulted in a potentially exploitable crash. This     vulnerability affects Firefox ESR < 68.8, Firefox < 76,     and Thunderbird < 68.8.0. (CVE-2020-12387)

  - A buffer overflow could occur when parsing and     validating SCTP chunks in WebRTC. This could have led to     memory corruption and a potentially exploitable crash.
    This vulnerability affects Firefox ESR < 68.8, Firefox <     76, and Thunderbird < 68.8.0. (CVE-2020-6831)

  - The 'Copy as cURL' feature of Devtools' network tab did     not properly escape the HTTP POST data of a request,     which can be controlled by the website. If a user used     the 'Copy as cURL' feature and pasted the command into a     terminal, it could have resulted in the disclosure of     local files. This vulnerability affects Firefox ESR <     68.8, Firefox < 76, and Thunderbird < 68.8.0.
    (CVE-2020-12392)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 75 and Firefox ESR 68.7.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort some of these     could have been exploited to run arbitrary code. This     vulnerability affects Firefox ESR < 68.8, Firefox < 76,     and Thunderbird < 68.8.0. (CVE-2020-12395)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

NewStart CGSL MAIN 6.01 : thunderbird Multiple Vulnerabilities (NS-SA-2020-0036)

critical Nessus Plugin ID 138776

Version 1.10

Version 1.9

Version 1.10 Apr 25, 2023, 11:11 PM CVSS temporal metrics (Adjust exploitability metrics for CISA KEV vulnerabilities) Plugin Feed: 202304252311
Version 1.9 Dec 6, 2022, 6:53 AM Reference Plugin Feed: 202212060653