Threats Tagged 'cve-2024-5693'

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in an update to version 115.12.1. These include use-after-free bugs, sandbox bypasses, information leaks, and memory corruption issues. The update fixes seven distinct CVEs related to networking, JavaScript object handling, protocol handler leaks, sandbox escapes, cross-origin image leaks, text fragment memory corruption, and other memory safety bugs. The vulnerabilities impact Red Hat Enterprise Linux 7 variants running Thunderbird. The update is rated as important by Red Hat and requires restarting Thunderbird to apply the fixes.

Red Hat has issued a security advisory for Firefox, upgrading it to version 115.12.0 ESR to address multiple vulnerabilities. These include use-after-free bugs in networking and JavaScript object transplant, timing attacks leaking external protocol handlers, sandbox bypasses by iframes, cross-origin image leaks, and memory corruption issues. The update fixes memory safety bugs affecting Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. The advisory rates the impact as Important and recommends applying the update and restarting Firefox.