CVE-2021-29949

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 78.9.1

Description The issue arises when Thunderbird attempts to load a shared library for the OTR protocol implementation using a filename not distributed by Thunderbird. If a malicious library with the alternative filename is already present on the computer and is located in a directory within the search path for executable libraries, Thunderbird will load the incorrect library.

Recommendations For versions prior to 78.9.1, update to version 78.9.1 or later to resolve the issue.