So grab your favorite beverage, and let’s highlight seven features from Thunderbird 102 we’re most excited about.īefore we jump in, it’s worth mentioning that we’ve been rapidly expanding our team in order to power up your productivity and improve your favorite email client. Thunderbird 102 includes several major new features for our global community of users, and we’re confident you’ll love them. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort, some of these could have been exploited to run arbitrary code.Welcome back to the Thunderbird blog! We’re really energized about our major 2022 release and cannot wait to put it in your hands.
Mozilla Fuzzing Team reported memory safety bugs present in Firefox 110 and ESR 102.8.
Other versions of Firefox are unaffected. This bug only affects Firefox on Windows. The Mozilla Foundation Security Advisory describes the issue that when downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the current user's context. This could have led to a potentially exploitable crash. While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. The Mozilla Foundation describes this issue as follows: This issue affects Firefox and Thunderbird ESR 102.8 and earlier. This may have lead future code to be incorrect and vulnerable. When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds. This could lead to a potentially exploitable crash. Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly.
0 kommentar(er)
