Test ID:	1.3.6.1.4.1.25623.1.1.12.2024.6840.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6840-1)
Summary:	The remote host is missing an update for the 'thunderbird' package(s) announced via the USN-6840-1 advisory.
Description:	Summary: The remote host is missing an update for the 'thunderbird' package(s) announced via the USN-6840-1 advisory. Vulnerability Insight: Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code.(CVE-2024-5688, CVE-2024-5690, CVE-2024-5696, CVE-2024-5700, CVE-2024-5702) Luan Herrera discovered that Thunderbird did not properly validate the X-Frame-Options header inside sandboxed iframe. An attacker could potentially exploit this issue to bypass sandbox restrictions to open a new window. (CVE-2024-5691) Kirtikumar Anandrao Ramchandani discovered that Thunderbird did not properly track cross-origin tainting in Offscreen Canvas. An attacker could potentially exploit this issue to access image data from another site in violation of same-origin policy. (CVE-2024-5693) Affected Software/OS: 'thunderbird' package(s) on Ubuntu 20.04, Ubuntu 22.04, Ubuntu 23.10. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-5688 https://bugzilla.mozilla.org/show_bug.cgi?id=1895086 https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html https://www.mozilla.org/security/advisories/mfsa2024-25/ https://www.mozilla.org/security/advisories/mfsa2024-26/ https://www.mozilla.org/security/advisories/mfsa2024-28/ https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html Common Vulnerability Exposure (CVE) ID: CVE-2024-5690 https://bugzilla.mozilla.org/show_bug.cgi?id=1883693 Common Vulnerability Exposure (CVE) ID: CVE-2024-5691 https://bugzilla.mozilla.org/show_bug.cgi?id=1888695 Common Vulnerability Exposure (CVE) ID: CVE-2024-5693 https://bugzilla.mozilla.org/show_bug.cgi?id=1891319 Common Vulnerability Exposure (CVE) ID: CVE-2024-5696 https://bugzilla.mozilla.org/show_bug.cgi?id=1896555 Common Vulnerability Exposure (CVE) ID: CVE-2024-5700 Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1862809%2C1889355%2C1893388%2C1895123 Common Vulnerability Exposure (CVE) ID: CVE-2024-5702 https://bugzilla.mozilla.org/show_bug.cgi?id=1193389 https://www.mozilla.org/security/advisories/mfsa2024-18/
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.