Red Hat Security Advisory

RHSA-2008:0209

thunderbird security update

Released 2008-04-03 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AS version 4 thunderbird-1.5.0.12-10.el4, thunderbird-1.5.0.12-10.el4.i386, thunderbird-1.5.0.12-10.el4.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-1.5.0.12-11.el5_1, thunderbird-1.5.0.12-11.el5_1.i386
Red Hat Enterprise Linux Desktop version 4 thunderbird-1.5.0.12-10.el4, thunderbird-1.5.0.12-10.el4.i386
Red Hat Enterprise Linux ES version 4 thunderbird-1.5.0.12-10.el4, thunderbird-1.5.0.12-10.el4.i386, thunderbird-1.5.0.12-10.el4.ia64
Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) thunderbird-1.5.0.12-11.el5_1, thunderbird-1.5.0.12-11.el5_1.i386
Red Hat Enterprise Linux WS version 4 thunderbird-1.5.0.12-10.el4, thunderbird-1.5.0.12-10.el4.i386, thunderbird-1.5.0.12-10.el4.ia64

Fixes 7 records

TI-2008-01187 CVE-2008-1235 · GHSA-q8g5-v4fw-48fq

Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before…

MEDIUM 49

Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06055 Published 2008-03-27 Fixed

TI-2008-01185 CVE-2008-1233 · GHSA-5rxf-q5vv-56x5

Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before…

LOW 37

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04344 Published 2008-03-27 Fixed CWE-94

TI-2008-01189 CVE-2008-1237 · GHSA-ccj2-5237-2hj8

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird…

LOW 36

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03373 Published 2008-03-27 Fixed CWE-399

TI-2008-01188 CVE-2008-1236 · GHSA-w4rq-q5f9-w548

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird…

LOW 36

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03373 Published 2008-03-27 Fixed CWE-399

TI-2008-01190 CVE-2008-1238 · GHSA-q345-fgmq-3pf3

Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP…

LOW 28

Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easie…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02443 Published 2008-03-27 Fixed CWE-287

TI-2008-01186 CVE-2008-1234 · GHSA-94wq-jwp8-mvj5

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird…

LOW 25

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02765 Published 2008-03-27 Fixed CWE-79

TI-2008-01192 CVE-2008-1241 · GHSA-wwx7-qx3f-7g4r

GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9…

LOW 24

GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01791 Published 2008-03-27 Fixed CWE-59