CVE-2019-11704

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 60.7.1

Description The issue is related to a heap buffer overflow in the icalmemory strdup and dequote function when processing certain email messages, potentially leading to a crash. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 60.7.1, update to version 60.7.1 or later to resolve the issue. As a temporary workaround, consider restricting the processing of email messages that could trigger the icalmemory strdup and dequote function until a patch is available.