Mozilla · Thunderbird · CVE-2019-11703
**Name of the Vulnerable Software and Affected Versions**
Thunderbird versions prior to 60.7.1
**Description**
A flaw in the implementation of iCal in Thunderbird causes a heap buffer overflow in `parser get next char` when processing certain email messages, resulting in a potentially exploitable crash. This issue may allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.
**Recommendations**
For Thunderbird versions prior to 60.7.1, update to version 60.7.1 or later to resolve the issue. As a temporary workaround, consider restricting the processing of certain email messages that may trigger the heap buffer overflow in `parser get next char` until a patch is available.