CVE-2020-26970 | BDVDB-2026-145692 Detail

MozillaThunderbird

Description#

When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to contain just one byte. Depending on processor architecture and stack layout, this leads to stack corruption that may be exploitable. This vulnerability affects Thunderbird < 78.5.1.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugzilla.mozilla.org/show_bug.cgi?id=1677338
https://www.mozilla.org/security/advisories/mfsa2020-53/

Exploit#

No public exploit known

History#

Version 12020-12-09Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.