denial-of-service from multiple "Confirm security exception" windows

Bug #1098340 reported by B Bobo
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
thunderbird (Ubuntu)
Triaged
Low
Unassigned

Bug Description

Thunderbird creates a new "Confirm security exception" window for each ssl certificate authentication error with the mail server. The result is potentially hundreds or thousands of "Confirm security exception" windows can be open at the same time. To close all the windows, you have to click on each window one by one, which can take a very long time. The open windows totally block any other use of thunderbird while they are open. This provides a feasible denial-of-service vector:- no further details will be provided about that. The bug can be fixed regardless. There should be a maximum of one open "Confirm security exception" window, and the window should not be modal.

Tags: security
information type: Private Security → Public Security
Changed in thunderbird (Ubuntu):
status: New → Triaged
importance: Undecided → Low
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.