远程 macOS 或 Mac OS X 主机上安装的 Thunderbird 版本低于 68.4.1。因此，如公告 mfsa2020-04 所述，受到多个漏洞的影响。- 当粘贴 <style> tag from the clipboard into     a rich text editor, the CSS sanitizer incorrectly     rewrites a @namespace rule. This could allow for     injection into certain types of websites resulting in     data exfiltration. This vulnerability affects     Thunderbird < 68.4. (CVE-2019-17016) - Due to a missing case handling object types, a type     confusion vulnerability could occur, resulting in a     crash. We presume that with enough effort that it could     be exploited to run arbitrary code. This vulnerability     affects Thunderbird < 68.4. (CVE-2019-17017) - When pasting a <style> tag from the clipboard into     a rich text editor, the CSS sanitizer does not escape     < and > characters. Because the resulting string     is pasted directly into the text node of the element     this does not result in a direct injection into the     webpage; however, if a webpage subsequently copies the     node's innerHTML, assigning it to another innerHTML,     this would result in an XSS vulnerability. Two WYSIWYG     editors were identified with this behavior, more may     exist. This vulnerability affects Thunderbird < 68.4. (CVE-2019-17022) Mozilla developers Jason Kratzer, Christian Holler, and     Bob Clary reported memory safety bugs present in     Thunderbird 68.3. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     some of these could have been exploited to run arbitrary     code. (CVE-2019-17024) - Incorrect alias information in IonMonkey JIT compiler for     setting array elements could lead to a type confusion. We     are aware of targeted attacks in the wild abusing this flaw. (CVE-2019-17026) Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

检测

Mozilla Thunderbird < 68.4.1

high Nessus 插件 ID 132773

版本 1.7