Red Hat Security AdvisoryRHSA-2011:0886
thunderbird security update
Released 2011-06-21 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-3.1.11-2.el6_1
Fixes 11 records
Priority MEDIUM 52
Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remot…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05772 · Published 2011-06-30 · Fixed CWE-399
Priority MEDIUM 52
Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remot…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05772 · Published 2011-06-30 · Fixed CWE-399
Priority MEDIUM 51
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or pos…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05505 · Published 2011-06-30 · Fixed
Priority MEDIUM 51
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allow remote attackers to cause a denial of service (memory corruption and…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05459 · Published 2011-06-30 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05655 · Published 2011-06-30 · Fixed
Priority MEDIUM 51
Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 allows remote attackers to cause a denial of service (memory corruption and application crash) or possi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05459 · Published 2011-06-30 · Fixed
Priority MEDIUM 51
Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via a crafte…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05572 · Published 2011-06-30 · Fixed CWE-399
Priority MEDIUM 50
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.11 allow remote attackers to cause a denial of service (memory corruption and application crash) or p…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04372 · Published 2011-06-30 · Fixed
Priority LOW 29
Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execu…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03769 · Published 2011-06-30 · Fixed CWE-119
Priority LOW 26
Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01777 · Published 2011-06-30 · Fixed CWE-264
Priority LOW 22
CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows re…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01034 · Published 2011-06-30 · Fixed CWE-94