Ubuntu Security Notice USN-6333-1

Ubuntu Security Notice 6333-1 - Junsung Lee discovered that Thunderbird did not properly validate the text direction override unicode character in filenames. An attacker could potentially exploits this issue by spoofing file extension while attaching a file in emails. Max Vlasov discovered that Thunderbird Offscreen Canvas did not properly track cross-origin tainting. An attacker could potentially exploit this issue to access image data from another site in violation of same-origin policy.

attacker canvas cross-origin emails exploits extension file issue lee notice origin override security security notice spoofing text thunderbird track ubuntu unicode usn