When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer. Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. #CVE-2019-11708: sandbox escape using Prompt:Open Reporter Coinbase Security Impact high Description We are aware of targeted attacks in the wild abusing this flaw. #CVE-2019-11707: Type confusion in Array.pop Reporter Samuel Groß of Google Project Zero, Coinbase Security Impact critical DescriptionĪ type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. However, you need to pay for a one-time 49.95 to use its full features.
Individuals can use this for free for non-commercial usage. Both the users of Windows and Mac can use this popular email client. In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts. eM Client eM Client is a Thunderbird alternative that comes with a less cluttered interface. Other great apps like Thunderbird are eM Client, Evolution, Claws Mail and Mailbird. The best alternative is K-9 Mail, which is both free and Open Source. Mozilla Foundation Security Advisory 2019-20 Security vulnerabilities fixed in Thunderbird 60.7.2 Announced JImpact high Products Thunderbird Fixed in There are more than 50 alternatives to Thunderbird for a variety of platforms, including Windows, Mac, Linux, Android and iPhone.
0 kommentar(er)
