CVE-2021-29949
published 2021-06-24CVE-2021-29949: When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't…
PriorityP434high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.32%
23.9th percentile
When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distributed by Thunderbird. If a computer has already been infected with a malicious library of the alternative filename, and the malicious library has been copied to a directory that is contained in the search path for executable libraries, then Thunderbird will load the incorrect library. This vulnerability affects Thunderbird < 78.9.1.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | thunderbird | < thunderbird 1:78.10.0-1 (bookworm) | thunderbird 1:78.10.0-1 (bookworm) |
| mozilla | firefox | — | — |
| mozilla | thunderbird | < 78.9.1 | 78.9.1 |
| mozilla | thunderbird | >= 0 < 1:78.10.0-1 | 1:78.10.0-1 |
| mozilla | thunderbird | >= 0 < 1:78.10.0-1 | 1:78.10.0-1 |
| mozilla | thunderbird | >= 0 < 1:78.10.0-1 | 1:78.10.0-1 |
| mozilla | thunderbird | >= 0 < 1:78.10.0-1 | 1:78.10.0-1 |
| mozilla | thunderbird | >= 0 < 1:78.11.0+build1-0ubuntu0.18.04.2 | 1:78.11.0+build1-0ubuntu0.18.04.2 |
| mozilla | thunderbird | >= 0 < 1:78.11.0+build1-0ubuntu0.20.04.2 | 1:78.11.0+build1-0ubuntu0.20.04.2 |
| mozilla | thunderbird | >= unspecified < 78.9.1 | 78.9.1 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.04.4MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
vendor_ubuntu7.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mhf4-98x7-2cw4: When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn
ghsa_unreviewed·2022-05-24
CVE-2021-29949 [HIGH] CWE-427 GHSA-mhf4-98x7-2cw4: When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn
When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distributed by Thunderbird. If a computer has already been infected with a malicious library of the alternative filename, and the malicious library has been copied to a directory that is contained in the search path for executable libraries, then Thunderbird will load the incorrect library. This vulnerability affects Thunderbird < 78.9.1.
OSV
thunderbird vulnerabilities
osv·2021-06-25·CVSS 7.4
[HIGH] thunderbird vulnerabilities
thunderbird vulnerabilities
USN-4995-1 fixed vulnerabilities in Thunderbird. This update provides
the corresponding updates for Ubuntu 18.04 LTS.
Original advisory details:
Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, spoof the UI, bypass security restrictions,
or execute arbitrary code. (CVE-2021-23961, CVE-2021-23981,
CVE-2021-23982, CVE-2021-23987, CVE-2021-23994, CVE-2021-23998,
CVE-2021-23999, CVE-2021-29945, CVE-2021-29946, CVE-2021-29967)
It was discovered that extensions could open popup windows with control
of the window title in some circumstances. If a user were tricked into
OSV
CVE-2021-29949: When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn
osv·2021-06-24·CVSS 7.8
CVE-2021-29949 [HIGH] CVE-2021-29949: When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn
When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distributed by Thunderbird. If a computer has already been infected with a malicious library of the alternative filename, and the malicious library has been copied to a directory that is contained in the search path for executable libraries, then Thunderbird will load the incorrect library. This vulnerability affects Thunderbird < 78.9.1.
OSV
thunderbird vulnerabilities
osv·2021-06-22·CVSS 7.4
CVE-2021-23961 [HIGH] thunderbird vulnerabilities
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, spoof the UI, bypass security restrictions,
or execute arbitrary code. (CVE-2021-23961, CVE-2021-23981,
CVE-2021-23982, CVE-2021-23987, CVE-2021-23994, CVE-2021-23998,
CVE-2021-23999, CVE-2021-29945, CVE-2021-29946, CVE-2021-29967)
It was discovered that extensions could open popup windows with control
of the window title in some circumstances. If a user were tricked into
installing a specially crafted extension, an attacker could potentially
exploit this to spoof a website and trick the user into providing
credentia
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2021-06-25·CVSS 7.4
CVE-2021-29948 [HIGH] Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Several security issues were fixed in Thunderbird.
USN-4995-1 fixed vulnerabilities in Thunderbird. This update provides
the corresponding updates for Ubuntu 18.04 LTS.
Original advisory details:
Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, spoof the UI, bypass security restrictions,
or execute arbitrary code. (CVE-2021-23961, CVE-2021-23981,
CVE-2021-23982, CVE-2021-23987, CVE-2021-23994, CVE-2021-23998,
CVE-2021-23999, CVE-2021-29945, CVE-2021-29946, CVE-2021-29967)
It was discovered that extensions could open popup windows with control
of
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2021-06-22·CVSS 7.4
CVE-2021-23961 [HIGH] Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Several security issues were fixed in Thunderbird.
Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, spoof the UI, bypass security restrictions,
or execute arbitrary code. (CVE-2021-23961, CVE-2021-23981,
CVE-2021-23982, CVE-2021-23987, CVE-2021-23994, CVE-2021-23998,
CVE-2021-23999, CVE-2021-29945, CVE-2021-29946, CVE-2021-29967)
It was discovered that extensions could open popup windows with control
of the window title in some circumstances. If a user were tricked into
installing a specially crafted extension, an attacker could potentially
exploit
Red Hat
Mozilla: Thunderbird might execute an alternative OTR library
vendor_redhat·2021-04-08·CVSS 7.8
CVE-2021-29949 [HIGH] CWE-426 Mozilla: Thunderbird might execute an alternative OTR library
Mozilla: Thunderbird might execute an alternative OTR library
When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distributed by Thunderbird. If a computer has already been infected with a malicious library of the alternative filename, and the malicious library has been copied to a directory that is contained in the search path for executable libraries, then Thunderbird will load the incorrect library. This vulnerability affects Thunderbird < 78.9.1.
Package: thunderbird (Red Hat Enterprise Linux 6) - Out of support scope
Debian
CVE-2021-29949: thunderbird - When loading the shared library that provides the OTR protocol implementation, T...
vendor_debian·2021·CVSS 7.8
CVE-2021-29949 [HIGH] CVE-2021-29949: thunderbird - When loading the shared library that provides the OTR protocol implementation, T...
When loading the shared library that provides the OTR protocol implementation, Thunderbird will initially attempt to open it using a filename that isn't distributed by Thunderbird. If a computer has already been infected with a malicious library of the alternative filename, and the malicious library has been copied to a directory that is contained in the search path for executable libraries, then Thunderbird will load the incorrect library. This vulnerability affects Thunderbird < 78.9.1.
Scope: local
bookworm: resolved (fixed in 1:78.10.0-1)
bullseye: resolved (fixed in 1:78.10.0-1)
forky: resolved (fixed in 1:78.10.0-1)
sid: resolved (fixed in 1:78.10.0-1)
trixie: resolved (fixed in 1:78.10.0-1)
Mozilla
Mozilla Foundation Security Advisory 2021-13: CVE-2021-29949
vendor_mozilla·CVSS 7.8
CVE-2021-29949 [HIGH] Mozilla Foundation Security Advisory 2021-13: CVE-2021-29949
Mozilla Foundation Security Advisory 2021-13
CVE: CVE-2021-29949
Product: Thunderbird
Impact: low
Fixed in: Thunderbird 78.9.1
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-06-24
Published