CVE-2019-11705

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 60.7.1

Description A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecur add bydayrules when processing certain email messages, resulting in a potentially exploitable crash. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations For Thunderbird versions prior to 60.7.1, update to version 60.7.1 or later to resolve the issue. As a temporary workaround, consider restricting the processing of email messages that may trigger the icalrecur add bydayrules function until a patch is available.