Ubuntu Security Notice USN-6015-1

Ubuntu Security Notice 6015-1 - Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code. Paul Menzel discovered that Thunderbird did not properly validate OCSP revocation status of recipient certificates when sending S/Mime encrypted email. An attacker could potentially exploits this issue to perform …

attack browsing bypass certificates code context cross-site denial of service email encrypted exploit exploits information mime notice ocsp paul restrictions security security issues security notice sensitive information service spoofing spoofing attack thunderbird tracing ubuntu usn website