Red Hat Security AdvisoryRHSA-2007:0401
thunderbird security update
Released 2007-05-31 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 thunderbird-1.5.0.12-0.1.el4, thunderbird-1.5.0.12-0.1.el4.i386, thunderbird-1.5.0.12-0.1.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-1.5.0.12-1.el5, thunderbird-1.5.0.12-1.el5.i386
- Red Hat Enterprise Linux Desktop version 4 thunderbird-1.5.0.12-0.1.el4, thunderbird-1.5.0.12-0.1.el4.i386
- Red Hat Enterprise Linux ES version 4 thunderbird-1.5.0.12-0.1.el4, thunderbird-1.5.0.12-0.1.el4.i386, thunderbird-1.5.0.12-0.1.el4.ia64
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) thunderbird-1.5.0.12-1.el5, thunderbird-1.5.0.12-1.el5.i386
- Red Hat Enterprise Linux WS version 4 thunderbird-1.5.0.12-0.1.el4, thunderbird-1.5.0.12-0.1.el4.i386, thunderbird-1.5.0.12-0.1.el4.ia64
Fixes 6 records
Priority MEDIUM 48
Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote att…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04868 · Published 2007-06-01 · Fixed CWE-94
Priority MEDIUM 46
Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attacke…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03407 · Published 2007-06-01 · Fixed CWE-119
Priority LOW 31
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption,…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07831 · Published 2007-06-01 · Fixed CWE-20
Priority LOW 25
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the bro…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0249 · Published 2007-06-01 · Fixed
Priority LOW 24
The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01798 · Published 2007-06-01 · Fixed
Priority LOW 18
The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02423 · Published 2007-04-16 · Fixed
THREATIST.IORead the docs