Threats Tagged 'cve-2024-9396'

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update. These include denial of service via specially crafted WebTransport requests, memory safety bugs, potential directory upload bypass via clickjacking, external protocol handler enumeration, memory corruption issues, cross-origin access to PDF and JSON contents, and site isolation bypass by compromised content processes. The update applies to Thunderbird versions 128.3 and 131 as referenced in the advisory. Red Hat has released updated packages for Red Hat Enterprise Linux 8.8 Extended Update Support to remediate these issues.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.8 Extended Update Support. These include denial of service via specially crafted WebTransport requests, memory safety bugs, potential directory upload bypass via clickjacking, external protocol handler enumeration, memory corruption during JIT compilation and object cloning, cross-origin access to PDF and JSON contents, and site isolation bypass by compromised content processes. The update fixes these issues in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8 updates. These include denial of service via specially crafted WebTransport requests, memory safety bugs, potential directory upload bypass via clickjacking, external protocol handler enumeration, memory corruption during JIT compilation and object cloning, cross-origin access to PDF and JSON contents through multipart responses, and site isolation bypass by compromised content processes. The update fixes these issues in Firefox versions 115.16, 128.3 ESR, and Thunderbird 131 and 128.3. Red Hat has rated this update as Important and provides patches for affected versions.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.6 updates. These include denial of service via specially crafted WebTransport requests, memory safety bugs, potential directory upload bypass via clickjacking, external protocol handler enumeration, potential memory corruption during JIT compilation and object cloning, cross-origin access to PDF and JSON contents through multipart responses, and site isolation bypass by compromised content processes. The update fixes these issues to improve security and stability.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in a Red Hat Enterprise Linux 7 Extended Lifecycle Support update. These include denial of service via specially crafted WebTransport requests, memory safety bugs, potential directory upload bypass through clickjacking, external protocol handler enumeration, memory corruption issues, cross-origin access to PDF and JSON contents, and site isolation bypass. The update fixes these issues in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3. Red Hat rates the security impact as Important and provides updated packages for affected versions.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.4 updates. These include denial of service via specially crafted WebTransport requests, memory safety bugs, potential directory upload bypass via clickjacking, external protocol handler enumeration, memory corruption issues, cross-origin access to PDF and JSON contents, and site isolation bypass by compromised content processes. The update is rated as important by Red Hat Product Security.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.2. These include denial of service via specially crafted WebTransport requests, memory safety bugs, potential directory upload bypass through clickjacking, external protocol handler enumeration, memory corruption issues, cross-origin access to PDF and JSON contents, and site isolation bypass by compromised content processes. The update fixes these issues in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 9.2 Extended Update Support. These include denial of service via specially crafted WebTransport requests, memory safety bugs, potential directory upload bypass via clickjacking, external protocol handler enumeration, memory corruption issues, cross-origin access to PDF and JSON contents, and site isolation bypass by compromised content processes. The update fixes these issues in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3. Red Hat has released patches to remediate these vulnerabilities.

A security update for Mozilla Firefox and Thunderbird addresses multiple vulnerabilities including denial of service via specially crafted WebTransport requests, memory safety bugs, potential directory upload bypass via clickjacking, external protocol handler enumeration, memory corruption during JIT compilation and object cloning, cross-origin access to PDF and JSON contents through multipart responses, and bypass of site isolation by compromised content processes. These issues affect Red Hat Enterprise Linux 9.0 packages of Firefox and Thunderbird. The update is rated as important by Red Hat Product Security.