When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash. This vulnerability affects Thunderbird < 68.5.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Thunderbird | Mozilla | * | 68.5.0 (excluding) |
| Red Hat Enterprise Linux 6 | RedHat | thunderbird-0:68.5.0-1.el6_10 | * |
| Red Hat Enterprise Linux 7 | RedHat | thunderbird-0:68.5.0-1.el7_7 | * |
| Red Hat Enterprise Linux 8 | RedHat | thunderbird-0:68.5.0-1.el8_1 | * |
| Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions | RedHat | thunderbird-0:68.5.0-1.el8_0 | * |
| Thunderbird | Ubuntu | bionic | * |
| Thunderbird | Ubuntu | devel | * |
| Thunderbird | Ubuntu | eoan | * |
| Thunderbird | Ubuntu | trusty | * |
| Thunderbird | Ubuntu | upstream | * |
| Thunderbird | Ubuntu | xenial | * |