Rewterz Threat Alert – APT32 Ocean Lotus – Active IOCs
February 15, 2022Rewterz Threat Advisory – Multiple VMware ESXi, Workstation, and Fusion Vulnerabilities
February 16, 2022Rewterz Threat Alert – APT32 Ocean Lotus – Active IOCs
February 15, 2022Rewterz Threat Advisory – Multiple VMware ESXi, Workstation, and Fusion Vulnerabilities
February 16, 2022Severity
High
Analysis Summary
CVE-2022-0566
Mozilla Thunderbird could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds write when processing a malformed message. By persuading a victim to open a specially-crafted email, a remote attacker could exploit this vulnerability using unknown attack vectors to execute arbitrary code on the vulnerable system or cause a denial of service.
Impact
- Code Execution
Indicators of Compromise
CVE
- CVE-2022-0566
Affected Vendors
Mozilla
Affected Products
- Mozilla Thunderbird 91.6.0
Remediation
Refer to Mozilla Foundation Security Advisory for patch, upgrade or suggested workaround information.