Red Hat Security Advisory

RHSA-2011:1439

thunderbird security update

Released 2011-11-08 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-3.1.16-2.el6_1

Fixes 3 records

TI-2011-03220 CVE-2011-3650 · GHSA-3238-3xx2-28gw

Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0…

MEDIUM 45

Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0233 Published 2011-11-09 Fixed CWE-119

TI-2011-03217 CVE-2011-3647 · GHSA-jqqv-7cc8-34qh

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does…

MEDIUM 44

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attac…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01876 Published 2011-11-09 Fixed CWE-20

TI-2011-03218 CVE-2011-3648 · GHSA-gwgh-7847-2vj4

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through…

LOW 23

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 allows remote attackers to inject arbitrary web script or HTML via crafted te…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01466 Published 2011-11-09 Fixed CWE-79