Red Hat Security AdvisoryRHSA-2012:0080
thunderbird security update
Released 2012-01-31 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) thunderbird-3.1.18-1.el6_2
- Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-3.1.18-1.el6_2
- Red Hat Enterprise Linux Workstation (v. 6) thunderbird-3.1.18-1.el6_2
Fixes 4 records
Priority HIGH 66
Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code via vector…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.36824 · Published 2012-02-01 · Fixed CWE-416
Priority MEDIUM 49
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05735 · Published 2012-02-01 · Partial fix CWE-119
Priority MEDIUM 47
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a d…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04539 · Published 2012-02-01 · Fixed
Priority LOW 27
Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02141 · Published 2012-02-01 · Fixed CWE-200