Red Hat Security Advisory

RHSA-2006:0677

thunderbird security update

Released 2006-09-15 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AS version 4 thunderbird-1.5.0.7-0.1.el4, thunderbird-1.5.0.7-0.1.el4.i386, thunderbird-1.5.0.7-0.1.el4.ia64 +1
Red Hat Enterprise Linux Desktop version 4 thunderbird-1.5.0.7-0.1.el4, thunderbird-1.5.0.7-0.1.el4.i386
Red Hat Enterprise Linux ES version 4 thunderbird-1.5.0.7-0.1.el4, thunderbird-1.5.0.7-0.1.el4.i386, thunderbird-1.5.0.7-0.1.el4.ia64
Red Hat Enterprise Linux WS version 4 thunderbird-1.5.0.7-0.1.el4, thunderbird-1.5.0.7-0.1.el4.i386, thunderbird-1.5.0.7-0.1.el4.ia64

Fixes 7 records

TI-2006-04417 CVE-2006-4571 · GHSA-vp9x-6f47-r7r2

Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before…

MEDIUM 52

Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arb…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05885 Published 2006-09-15 Fixed

TI-2006-04411 CVE-2006-4565 · GHSA-xr4c-88wp-frr7

Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7…

MEDIUM 49

Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06172 Published 2006-09-15 Fixed CWE-119

TI-2006-04108 CVE-2006-4253 · GHSA-42hr-qcx2-4fr6

Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers…

MEDIUM 49

Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply ne…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.15185 Published 2006-08-21 Fixed CWE-264

TI-2006-04412 CVE-2006-4566 · GHSA-vr27-vq6j-wvvp

Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5…

LOW 30

Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0408 Published 2006-09-15 Fixed

TI-2006-04193 CVE-2006-4340 · GHSA-q7vf-rjwh-chxv

Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox…

LOW 23

Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly ha…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.02323 Published 2006-09-15 Fixed CWE-20

TI-2006-04416 CVE-2006-4570 · GHSA-23g7-p8vx-g5m2

Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images"…

LOW 18

Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loade…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.02437 Published 2006-09-15 Fixed

TI-2006-04413 CVE-2006-4567 · GHSA-g5fp-x2h2-86wp

Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to…

LOW 17

Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01939 Published 2006-09-15 Fixed