latest version mozilla thunderbird download 2019

This resulted in a potentially exploitable crash in some instances. #CVE-2019-11760: Stack buffer overflow in WebRTC networking Reporter Nils Impact moderate DescriptionĪ fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling. This could be used by an attacker to execute arbitrary code or more likely lead to a crash. #CVE-2019-11759: Stack buffer overflow in HKDF output Reporter Guido Vranken Impact moderate DescriptionĪn attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack. This bug showed evidence of memory corruption in the accessibility engine and we presume that with enough effort that it could be exploited to run arbitrary code. Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was installed. #CVE-2019-11758: Potentially exploitable crash due to 360 Total Security Reporter Mozilla developers and community Impact high Description This resulted in a use-after-free and a potentially exploitable crash.

When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. #CVE-2019-11757: Use-after-free when creating index updates in IndexedDB Reporter Zhanjia Song Impact high Description A subsequent call to XML_GetCurrentLineNumber or XML_GetCurrentColumnNumber then resulted in a heap-based buffer over-read. In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early. #CVE-2019-15903: Heap overflow in expat library in XML_GetCurrentLineNumber Reporter Sebastian Pipping Impact high Description Mozilla Foundation Security Advisory 2019-35 Security vulnerabilities fixed in - Thunderbird 68.2 Announced OctoImpact critical Products Thunderbird Fixed in

Latest version mozilla thunderbird download 2019