Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.6015.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6015-1)
Summary:	The remote host is missing an update for the 'thunderbird' package(s) announced via the USN-6015-1 advisory.
Description:	Summary: The remote host is missing an update for the 'thunderbird' package(s) announced via the USN-6015-1 advisory. Vulnerability Insight: Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code. (CVE-2023-1945, CVE-2023-29548, CVE-2023-29550) Paul Menzel discovered that Thunderbird did not properly validate OCSP revocation status of recipient certificates when sending S/Mime encrypted email. An attacker could potentially exploits this issue to perform spoofing attack. (CVE-2023-0547) Ribose RNP Team discovered that Thunderbird did not properly manage memory when parsing certain OpenPGP messages. An attacker could potentially exploits this issue to cause a denial of service. (CVE-2023-29479) Irvan Kurniawan discovered that Thunderbird did not properly manage fullscreen notifications using a combination of window.open, fullscreen requests, window.name assignments, and setInterval calls. An attacker could potentially exploit this issue to perform spoofing attacks. (CVE-2023-29533) Lukas Bernhard discovered that Thunderbird did not properly manage memory when doing Garbage Collector compaction. An attacker could potentially exploits this issue to cause a denial of service. (CVE-2023-29535) Zx from qriousec discovered that Thunderbird did not properly validate the address to free a pointer provided to the memory manager. An attacker could potentially exploits this issue to cause a denial of service. (CVE-2023-29536) Trung Pham discovered that Thunderbird did not properly validate the filename directive in the Content-Disposition header. An attacker could possibly exploit this to perform reflected file download attacks potentially tricking users to install malware. (CVE-2023-29539) Ameen Basha M K discovered that Thunderbird did not properly validate downloads of files ending in .desktop. An attacker could potentially exploits this issue to execute arbitrary code. (CVE-2023-29541) Affected Software/OS: 'thunderbird' package(s) on Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 22.10. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-0547 https://bugzilla.mozilla.org/show_bug.cgi?id=1811298 https://www.mozilla.org/security/advisories/mfsa2023-15/ Common Vulnerability Exposure (CVE) ID: CVE-2023-1945 https://bugzilla.mozilla.org/show_bug.cgi?id=1777588 https://www.mozilla.org/security/advisories/mfsa2023-14/ Common Vulnerability Exposure (CVE) ID: CVE-2023-29479 https://cve.ribose.com/advisories/ra-2023-04-11/ https://www.rnpgp.org/blog/2023-04-13-rnp-release-0-16-3/ Common Vulnerability Exposure (CVE) ID: CVE-2023-29533 https://bugzilla.mozilla.org/show_bug.cgi?id=1798219 https://bugzilla.mozilla.org/show_bug.cgi?id=1814597 https://www.mozilla.org/security/advisories/mfsa2023-13/ Common Vulnerability Exposure (CVE) ID: CVE-2023-29535 https://bugzilla.mozilla.org/show_bug.cgi?id=1820543 Common Vulnerability Exposure (CVE) ID: CVE-2023-29536 https://bugzilla.mozilla.org/show_bug.cgi?id=1821959 Common Vulnerability Exposure (CVE) ID: CVE-2023-29539 https://bugzilla.mozilla.org/show_bug.cgi?id=1784348 Common Vulnerability Exposure (CVE) ID: CVE-2023-29541 https://bugzilla.mozilla.org/show_bug.cgi?id=1810191 Common Vulnerability Exposure (CVE) ID: CVE-2023-29548 https://bugzilla.mozilla.org/show_bug.cgi?id=1822754 Common Vulnerability Exposure (CVE) ID: CVE-2023-29550 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1720594%2C1812498%2C1814217%2C1818357%2C1751945%2C1818762%2C1819493%2C1820389%2C1820602%2C1821448%2C1822413%2C1824828
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.