Lucene search

K
redhatcveRedhat.comRH:CVE-2019-11706
HistoryMar 07, 2020 - 7:33 a.m.

CVE-2019-11706

2020-03-0707:33:56
redhat.com
access.redhat.com
18

0.038 Low

EPSS

Percentile

92.0%

A flaw in Thunderbird’s implementation of iCal causes a type confusion in icaltimezone_get_vtimezone_properties when processing certain email messages, resulting in a crash. This vulnerability affects Thunderbird < 60.7.1.

Mitigation

Thunderbird can be configured to use icaljs instead of libical by setting calendar.icaljs = true in preferences, mitigating this vulnerability.