Ubuntu: (CVE-2024-11691): thunderbird vulnerability

Ubuntu: (CVE-2024-11691): thunderbird vulnerability

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

11/26/2024

Created

01/21/2025

Added

01/20/2025

Modified

01/20/2025

Description

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. *This bug only affected the application on Apple M series hardware. Other platforms were unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18.

Solution(s)

• ubuntu-upgrade-thunderbird

References

• https://attackerkb.com/topics/cve-2024-11691
• CVE - 2024-11691
• https://bugzilla.mozilla.org/show_bug.cgi?id=1914707
• https://bugzilla.mozilla.org/show_bug.cgi?id=1924184
• https://www.cve.org/CVERecord?id=CVE-2024-11691
• https://www.mozilla.org/en-US/security/advisories/mfsa2024-63/#CVE-2024-11691
• https://www.mozilla.org/en-US/security/advisories/mfsa2024-64/#CVE-2024-11691
• https://www.mozilla.org/en-US/security/advisories/mfsa2024-68/#CVE-2024-11691
• https://www.mozilla.org/security/advisories/mfsa2024-63/
• https://www.mozilla.org/security/advisories/mfsa2024-64/
• https://www.mozilla.org/security/advisories/mfsa2024-65/
• https://www.mozilla.org/security/advisories/mfsa2024-67/
• https://www.mozilla.org/security/advisories/mfsa2024-68/

View more