Search the Community

A type confusion has been identified in the Thunderbird email client. The issue is present in the libical implementation, which was forked from upstream libical version 0.47. The issue can be triggered remotely, when an attacker sends an specially crafted calendar attachment and does not require user interaction. It might be used by a remote attacker to crash the process or leak information from the client system via calendar replies. Proof of concept included. View the full article

A stack-based buffer overflow has been identified in the Thunderbird email client. The issue is present in the libical implementation, which was forked from upstream libical version 0.47. The issue can be triggered remotely, when an attacker sends an specially crafted calendar attachment and does not require user interaction. It might be used by a remote attacker to crash or gain remote code execution in the client system. Proof of concept included. View the full article

A heap-based buffer overflow has been identified in the Thunderbird email client. The issue is present in the libical implementation, which was forked from upstream libical version 0.47. The issue can be triggered remotely, when an attacker sends an specially crafted calendar attachment and does not require user interaction. It might be used by a remote attacker to crash or gain remote code execution in the client system. Proof of concept included. View the full article

A heap-based buffer overflow has been identified in the Thunderbird email client. The issue is present in the libical implementation, which was forked from upstream libical version 0.47. The issue can be triggered remotely, when an attacker sends an specially crafted calendar attachment and does not require user interaction. It might be used by a remote attacker to crash or gain remote code execution in the client system. Proof of concept included. View the full article

Hello, first, sorry for my bad english, ich hope you can understand my question. sometimes i can't log in in my dumped e-mail accounts but when i try it with thunderbird there are no problems. on my main pc i am using a vpn and i used thunderbird in a virtual machine where proxifier was active with the "all_system" profile of vip72. ist there any risk for my security or can i use thunderbird,outlook similar tools without any problems? or can anyone say me a tool like "e-mail viewer by src-team"? i can't find a downloadlink for it or other tools like that. thank you veeeeeeery much from germany, skippa