Files
CVEs-PoC/2020/CVE-2020-6792.md
T
2024-05-25 21:48:12 +02:00

18 lines
704 B
Markdown

### [CVE-2020-6792](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6792)
![](https://img.shields.io/static/v1?label=Product&message=Thunderbird&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2068.5%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Message%20ID%20calculcation%20was%20based%20on%20uninitialized%20data&color=brighgreen)
### Description
When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird < 68.5.
### POC
#### Reference
- https://usn.ubuntu.com/4328-1/
#### Github
- https://github.com/ARPSyndicate/cvemon