CVE-2019-11705 in Ubuntu

CVE-2019-11705

Priority

Description

A flaw in Thunderbird's implementation of iCal causes a stack buffer
overflow in icalrecur_add_bydayrules when processing certain email
messages, resulting in a potentially exploitable crash. This vulnerability
affects Thunderbird < 60.7.1.

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11705
https://www.openwall.com/lists/oss-security/2019/06/13/3
https://bugzilla.mozilla.org/show_bug.cgi?id=1553808
https://www.mozilla.org/en-US/security/advisories/mfsa2019-17/#CVE-2019-11705
https://usn.ubuntu.com/usn/usn-4028-1

Notes

Package

Source: thunderbird (LP Ubuntu Debian)

Upstream:	released (60.7.1)
Ubuntu 12.04 ESM (Precise Pangolin):	DNE
Ubuntu 14.04 ESM (Trusty Tahr):	DNE
Ubuntu 16.04 LTS (Xenial Xerus):	released (1:60.7.1+build1-0ubuntu0.16.04.1)
Ubuntu 18.04 LTS (Bionic Beaver):	released (1:60.7.1+build1-0ubuntu0.18.04.1)

More Information

Mitre
NVD
Launchpad
Debian

Updated: 2020-07-28 20:06:09 UTC (commit d26b6ca9f5b3adb89bb036ce73ae7dab894935ec)