Mirko Brodesser

**Nome do Software Vulnerável e Versões Afetadas** Versões do Thunderbird anteriores a 141 Versões do Thunderbird anteriores a 128.13 Versões do Firefox anteriores a 141 Versões do Firefox ESR anteriores a 128.13 Versões do Firefox ESR anteriores a 140.1 **Descrição** O Thunderbird e o Firefox são afetados por uma falha na qual URLs `javascript:` são executadas quando usadas dentro de tags `object` e `embed`. **Recomendações** Atualize o Thunderbird para a versão 141 ou posterior. Atualize o Firefox para a versão 141 ou posterior. Atualize o Firefox ESR para a versão 128.13 ou posterior. Atualize o Firefox ESR para a versão 140.1 ou posterior.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 71 Firefox ESR versions prior to 68.3 Thunderbird versions prior to 68.3 **Description** The issue is related to a serialization mechanism in the affected software, where a lack of input size validation leads to a potential buffer overflow. This could result in memory corruption and a crash, potentially allowing a remote attacker to gain unauthorized access to confidential data, cause a denial of service, or impact data integrity. **Recommendations** For Firefox versions prior to 71, update to version 71 or later. For Firefox ESR versions prior to 68.3, update to version 68.3 or later. For Thunderbird versions prior to 68.3, update to version 68.3 or later.