Christian Holler, David Keeler and Byron Campen discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1547)
Atte Kettunen discovered a buffer overflow when interacting with WebAudio buffers. If a user had enabled scripting, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1549)
Atte Kettunen discovered a use-after-free in WebAudio. If a user had enabled scripting, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1550)
Jethro Beekman discovered a use-after-free when the FireOnStateChange event is triggered in some circumstances. If a user had enabled scripting, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the priviliges of the user invoking Thunderbird. (CVE-2014-1555)
Patrick Cozzi discovered a crash when using the Cesium JS library to generate WebGL content. If a user had enabled scripting, an attacker could potentially exploit this to execute arbitrary code with the privilges of the user invoking Thunderbird. (CVE-2014-1556)
Tyson Smith and Jesse Schwartzentruber discovered a use-after-free in CERT_DestroyCertificate. If a user had enabled scripting, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1544)
A crash was discovered in Skia when scaling an image, if the scaling operation takes too long. If a user had enabled scripting, an attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1557)
Christian Holler discovered several issues when parsing certificates with non-standard character encoding, resulting in the inability to use valid SSL certificates in some circumstances. (CVE-2014-1558, CVE-2014-1559, CVE-2014-1560)
Boris Zbarsky discovered that network redirects could cause an iframe to escape the confinements defined by its sandbox attribute in some circumstances. If a user had enabled scripting, an attacker could potentially exploit this to conduct cross-site scripting attacks. (CVE-2014-1552)
{ "availability": "No subscription required", "binaries": [ { "binary_name": "thunderbird", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-dbg", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-dev", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-globalmenu", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-gnome-support", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-gnome-support-dbg", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-af", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ar", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ast", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-be", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-bg", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-bn", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-bn-bd", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-br", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ca", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-cs", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-da", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-de", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-el", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-en", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-en-gb", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-en-us", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-es", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-es-ar", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-es-es", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-et", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-eu", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-fi", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-fr", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-fy", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-fy-nl", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ga", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ga-ie", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-gd", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-gl", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-he", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-hr", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-hu", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-hy", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-id", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-is", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-it", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ja", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ka", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ko", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-lt", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-mk", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-nb", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-nb-no", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-nl", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-nn", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-nn-no", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-pa", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-pa-in", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-pl", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-pt", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-pt-br", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-pt-pt", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-rm", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ro", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ru", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-si", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-sk", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-sl", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-sq", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-sr", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-sv", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-sv-se", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ta", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-ta-lk", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-tr", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-uk", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-vi", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-zh-cn", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-zh-hans", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-zh-hant", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-locale-zh-tw", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-mozsymbols", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "thunderbird-testsuite", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "xul-ext-calendar-timezones", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "xul-ext-gdata-provider", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" }, { "binary_name": "xul-ext-lightning", "binary_version": "1:31.0+build1-0ubuntu0.14.04.1" } ] }