Red Hat Security AdvisoryRHSA-2010:0544
thunderbird security update
Released 2010-07-21 · Red Hat rating Moderate · View on Red Hat →
Fixes 12 records
Priority MEDIUM 53
Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary co…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.11418 · Published 2010-06-23 · Fixed CWE-189
Priority MEDIUM 52
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to caus…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05922 · Published 2010-04-05 · Fixed
Priority MEDIUM 50
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07585 · Published 2010-07-30 · Fixed CWE-189
Priority MEDIUM 50
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06938 · Published 2010-04-05 · Fixed CWE-399
Priority MEDIUM 50
Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrar…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06997 · Published 2010-04-05 · Fixed CWE-399
Priority MEDIUM 48
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a la…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.06672 · Published 2010-07-30 · Fixed CWE-190
Priority MEDIUM 48
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of s…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05021 · Published 2010-06-23 · Fixed
Priority MEDIUM 48
Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04812 · Published 2010-06-23 · Fixed CWE-399
Priority MEDIUM 48
Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which mi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05161 · Published 2010-04-05 · Fixed CWE-399
Priority MEDIUM 46
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote att…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03726 · Published 2010-07-30 · Fixed
Priority LOW 25
dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in c…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01069 · Published 2010-07-29 · Partial fix CWE-200
Priority LOW 24
Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTT…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0207 · Published 2010-06-23 · Partial fix CWE-79