This led to memory corruption and a potentially exploitable crash. Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection. #CVE-2021-29984: Incorrect instruction reordering during JIT optimization Reporter Lukas Bernhard Impact high Description Thunderbird incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash. #CVE-2021-29988: Memory corruption as a result of incorrect style treatment Reporter Irvan Kurniawan Impact high Description #CVE-2021-29981: Live range splitting could have led to conflicting assignments in the JIT Reporter Gary Kwong Impact high DescriptionĪn issue present in lowering/register allocation could have led to obscure but deterministic register confusion failures in JITted code that would lead to a potentially exploitable crash. Note: This issue only affected Linux operating systems. #CVE-2021-29986: Race condition when resolving DNS names could have led to memory corruption Reporter pahhur Impact high DescriptionĪ suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash.
In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts. Mozilla Foundation Security Advisory 2021-36 Security Vulnerabilities fixed in Thunderbird 91 Announced AugImpact high Products Thunderbird Fixed in
0 kommentar(er)
