Red Hat Security AdvisoryRHSA-2006:0760
thunderbird security update
Released 2006-12-19 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 thunderbird-1.5.0.9-0.1.el4, thunderbird-1.5.0.9-0.1.el4.i386, thunderbird-1.5.0.9-0.1.el4.ia64 +1
- Red Hat Enterprise Linux Desktop version 4 thunderbird-1.5.0.9-0.1.el4, thunderbird-1.5.0.9-0.1.el4.i386
- Red Hat Enterprise Linux ES version 4 thunderbird-1.5.0.9-0.1.el4, thunderbird-1.5.0.9-0.1.el4.i386, thunderbird-1.5.0.9-0.1.el4.ia64
- Red Hat Enterprise Linux WS version 4 thunderbird-1.5.0.9-0.1.el4, thunderbird-1.5.0.9-0.1.el4.i386, thunderbird-1.5.0.9-0.1.el4.ia64
Fixes 7 records
Priority MEDIUM 52
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memo…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0889 · Published 2006-12-20 · Fixed CWE-94
Priority LOW 37
Multiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1.0.7 allow remote attackers to execute arbitrary code via (1) external message modies with long Content-Type headers or (2)…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0435 · Published 2006-12-20 · Fixed
Priority LOW 37
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04204 · Published 2006-12-20 · Fixed CWE-254
Priority LOW 37
Multiple unspecified vulnerabilities in the JavaScript engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, SeaMonkey before 1.0.7, and Mozilla 1.7 and probably earlier on Sola…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04437 · Published 2006-12-20 · Fixed
Priority LOW 37
Multiple unspecified vulnerabilities in the layout engine for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allow remote attackers to cause a denial of s…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04437 · Published 2006-12-20 · Fixed
Priority LOW 36
Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial o…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.02414 · Published 2006-12-20 · Fixed
Priority LOW 36
Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02997 · Published 2006-12-20 · Fixed CWE-264