Red Hat Security AdvisoryRHSA-2010:0896
thunderbird security update
Released 2010-11-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) thunderbird-3.1.6-1.el6_0
- Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-3.1.6-1.el6_0
- Red Hat Enterprise Linux Workstation (v. 6) thunderbird-3.1.6-1.el6_0
Fixes 8 records
Priority CRITICAL 100KEV
Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled, allows remote attackers to execute arbit…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.83156 · Published 2010-10-27 · Fixed CWE-119
Priority MEDIUM 52
Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attacker…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10118 · Published 2010-10-21 · Fixed CWE-119
Priority MEDIUM 49
The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly support window.__loo…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06451 · Published 2010-10-21 · Fixed CWE-119
Priority MEDIUM 48
Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to exec…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04644 · Published 2010-10-21 · Fixed CWE-399
Priority MEDIUM 47
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allow remote attacker…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0455 · Published 2010-10-21 · Fixed
Priority MEDIUM 46
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.11 and Thunderbird 3.1.x before 3.1.5 allow remote attackers to cause a denial of service (memory corruption and application…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03726 · Published 2010-10-21 · Fixed
Priority LOW 30
A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in th…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00286 · Published 2010-10-21 · Fixed
Priority LOW 29
Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 do not properly handle certain modal calls made by javascript: URLs in circumstances rela…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.01398 · Published 2010-10-21 · Fixed CWE-264