CVE:CVE-2022-46881
CNNVD:CNNVD-202212-2990
Mozilla Thunderbird是美国Mozilla基金会的一套从Mozilla Application Suite独立出来的电子邮件客户端软件。该软件支持IMAP、POP邮件协议以及HTML邮件格式。
Mozilla Thunderbird存在安全漏洞，该漏洞源于对WebGL优化不正确。攻击者利用该漏洞导致内存损坏和系统崩溃。
solution:Upgrade mozilla firefox to a higher version than 106.0,and avoid the version (,106.0); Upgrade mozilla firefox_esr to a higher version than 102.6,and avoid the version (,102.6); Upgrade mozilla thunderbird to a higher version than 102.6,and avoid the version (,102.6)