Wednesday, April 21, 2021

MFSA2021-14 Thunderbird: Security Vulnerabilities fixed in Thunderbird 78.10 (CVE-2021-29948)

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replacing the file.
Solution(s)
mozilla-thunderbird-upgrade-78_10


Referenceshttps://attackerkb.com/topics/cve-2021-29948
CVE - 2021-29948
http://www.mozilla.org/security/announce/2021/mfsa2021-14.html