Red Hat Security AdvisoryRHSA-2011:1343
thunderbird security update
Released 2011-09-28 · Red Hat rating Critical · View on Red Hat →
Fixed in
- RHEL Optional Productivity Applications (v. 5 server) thunderbird-2.0.0.24-26.el5_7, thunderbird-2.0.0.24-26.el5_7.i386
- Red Hat Enterprise Linux AS version 4 thunderbird-1.5.0.12-44.el4, thunderbird-1.5.0.12-44.el4.i386, thunderbird-1.5.0.12-44.el4.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-2.0.0.24-26.el5_7, thunderbird-2.0.0.24-26.el5_7.i386
- Red Hat Enterprise Linux Desktop version 4 thunderbird-1.5.0.12-44.el4, thunderbird-1.5.0.12-44.el4.i386
- Red Hat Enterprise Linux ES version 4 thunderbird-1.5.0.12-44.el4, thunderbird-1.5.0.12-44.el4.i386, thunderbird-1.5.0.12-44.el4.ia64
- Red Hat Enterprise Linux WS version 4 thunderbird-1.5.0.12-44.el4, thunderbird-1.5.0.12-44.el4.i386, thunderbird-1.5.0.12-44.el4.ia64
Fixes 2 records
Priority MEDIUM 51
Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via JavaScript code containing a large RegExp expressio…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05368 · Published 2011-09-30 · Fixed CWE-189
Priority LOW 22
Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6.0, and SeaMonkey before 2.3 do not properly handle "location" as the name of a frame, which allows remote attackers to bypass the Same Origin Policy v…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01095 · Published 2011-09-29 · Fixed CWE-264
