CVE-2019-11706

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 60.7.1

Description A flaw in Thunderbird's implementation of iCal causes a type confusion in icaltimezone get vtimezone properties when processing certain email messages, resulting in a crash. The vulnerability is related to a lack of type checking of the passed object, which can be exploited by a remote attacker to cause a denial of service.

Recommendations For Thunderbird versions prior to 60.7.1, update to version 60.7.1 or later to resolve the issue. As a temporary workaround, consider avoiding the processing of suspicious email messages that may trigger the type confusion in icaltimezone get vtimezone properties.