MFSA2023-07 Thunderbird: Security Vulnerabilities fixed in Thunderbird 102.8 (CVE-2023-25746)

MFSA2023-07 Thunderbird: Security Vulnerabilities fixed in Thunderbird 102.8 (CVE-2023-25746)

Severity

9

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

02/15/2023

Created

02/18/2023

Added

02/17/2023

Modified

01/28/2025

Description

Memory safety bugs present in Firefox ESR 102.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 102.8 and Firefox ESR < 102.8.

Solution(s)

• mozilla-thunderbird-upgrade-102_8

References

• https://attackerkb.com/topics/cve-2023-25746
• CVE - 2023-25746
• http://www.mozilla.org/security/announce/2023/mfsa2023-07.html