centralpanic (2)

Last Login: November 28, 2023
Assessments
1
Score
2

centralpanic's Latest (1) Contributions

Sort by:
Filter by:
1
Ratings
  • Attacker Value
    Low
  • Exploitability
    High
Observed in nation state sponsored attacksObserved in ransomware attacksDifficult to weaponizeRequires elevated access
Technical Analysis

Simple to resolve Upgrade Ubuntu:23.10 thunderbird to version 1:115.5.0+build1-0ubuntu0.23.10.1 or higher..

Also looking at the code, there doesn’t seem to be any reason why gPropertiesFile can’t be:

static const char* gPropertiesFile[nsContentUtils::PropertiesFile[COUNT]
The CreateBundle method each of those strings is passed to expects a const char* with no hard-coded expectation of length. It’s static so the symbol can’t be resolved outside this cpp. Also, fwiw the new max length string in that array is 75, not 78 (including null-terminator).

Why is the setting to enable 2 rather than 1?

Apart from that it looks fine to me.