Red Hat Security Advisory

RHSA-2012:1211

thunderbird security update

Released 2012-08-29 · Red Hat rating Critical · View on Red Hat →

Fixed in

RHEL Optional Productivity Applications (v. 5 server) thunderbird-10.0.7-1.el5_8, thunderbird-10.0.7-1.el5_8.i386
Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-10.0.7-1.el5_8, thunderbird-10.0.7-1.el5_8.i386
Red Hat Enterprise Linux Desktop (v. 6) thunderbird-10.0.7-1.el6_3
Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-10.0.7-1.el6_3
Red Hat Enterprise Linux Workstation (v. 6) thunderbird-10.0.7-1.el6_3

Fixes 23 records

TI-2012-03378 CVE-2012-3957 · GHSA-52qm-v8p3-wc8p

Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox…

MEDIUM 53

Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.1…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07762 Published 2012-08-29 Fixed CWE-787

TI-2012-03389 CVE-2012-3968 · GHSA-qcpm-mq3m-89w8

Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0…

MEDIUM 52

Use-after-free vulnerability in the WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remot…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05899 Published 2012-08-29 Fixed CWE-416

TI-2012-03384 CVE-2012-3963 · GHSA-6pm7-78w9-hj44

Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla…

MEDIUM 52

Use-after-free vulnerability in the js::gc::MapAllocToTraceKind function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05949 Published 2012-08-29 Fixed CWE-416

TI-2012-03382 CVE-2012-3961 · GHSA-3892-r6vc-28jh

Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before…

MEDIUM 52

Use-after-free vulnerability in the RangeData implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows r…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06664 Published 2012-08-29 Fixed CWE-416

TI-2012-03391 CVE-2012-3970 · GHSA-9g4c-vw2f-x5wq

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox…

MEDIUM 51

Use-after-free vulnerability in the nsTArray_base::Length function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 al…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05194 Published 2012-08-29 Fixed CWE-399

TI-2012-03387 CVE-2012-3966 · GHSA-fcr9-rj2r-hxx8

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0…

MEDIUM 51

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remote attackers to execute arbitrary code or cause a denial of se…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05194 Published 2012-08-29 Fixed CWE-119

TI-2012-03385 CVE-2012-3964 · GHSA-fcj8-hrrx-c7qh

Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox…

MEDIUM 51

Use-after-free vulnerability in the gfxTextRun::GetUserData function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05238 Published 2012-08-29 Fixed CWE-399

TI-2012-03381 CVE-2012-3960 · GHSA-qxv8-c8g2-x423

Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in…

MEDIUM 51

Use-after-free vulnerability in the mozSpellChecker::SetCurrentDictionary function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonke…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05408 Published 2012-08-29 Fixed CWE-416

TI-2012-03379 CVE-2012-3958 · GHSA-x3v5-65x5-mw6v

Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in…

MEDIUM 51

Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableElements function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMon…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05194 Published 2012-08-29 Fixed CWE-399

TI-2012-03377 CVE-2012-3956 · GHSA-hpcf-86q2-6579

Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in…

MEDIUM 51

Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Run function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05408 Published 2012-08-29 Fixed CWE-416

TI-2012-01753 CVE-2012-1976 · GHSA-27p7-3j3g-v9wc

Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in…

MEDIUM 51

Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesValues function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonk…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05613 Published 2012-08-29 Fixed CWE-416

TI-2012-01752 CVE-2012-1975 · GHSA-wg5q-jqw8-gvx6

Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox…

MEDIUM 51

Use-after-free vulnerability in the PresShell::CompleteMove function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05613 Published 2012-08-29 Fixed CWE-416

TI-2012-01751 CVE-2012-1974 · GHSA-rv5h-275w-vgj6

Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla…

MEDIUM 51

Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey befor…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05566 Published 2012-08-29 Fixed CWE-416

TI-2012-01750 CVE-2012-1973 · GHSA-r53w-5jxq-jrrv

Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in…

MEDIUM 51

Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey b…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05566 Published 2012-08-29 Fixed CWE-416

TI-2012-01749 CVE-2012-1972 · GHSA-75hg-2pwx-343g

Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in…

MEDIUM 51

Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentTextNodes function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMon…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05566 Published 2012-08-29 Fixed CWE-416

TI-2012-01747 CVE-2012-1970 · GHSA-24gf-j9ch-cj9r

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before…

MEDIUM 51

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allow remo…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05566 Published 2012-08-29 Fixed CWE-119

TI-2012-03380 CVE-2012-3959 · GHSA-vghw-8pfj-xhjg

Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla…

MEDIUM 50

Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey bef…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04697 Published 2012-08-29 Fixed CWE-416

TI-2012-03390 CVE-2012-3969 · GHSA-h64v-9hp2-5crq

Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox…

MEDIUM 48

Integer overflow in the nsSVGFEMorphologyElement::Filter function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 all…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04805 Published 2012-08-29 Fixed CWE-189

TI-2012-03383 CVE-2012-3962 · GHSA-23q5-53ph-6386

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0…

MEDIUM 48

Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 do not properly iterate through the characters in a text run, which allo…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04731 Published 2012-08-29 Fixed

TI-2012-03388 CVE-2012-3967 · GHSA-pfgj-fg47-5ff5

The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7…

MEDIUM 47

The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uni…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04392 Published 2012-08-29 Fixed CWE-787

TI-2012-03400 CVE-2012-3980 · GHSA-356v-396g-55j7

The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7…

MEDIUM 45

The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, and Thunderbird ESR 10.x before 10.0.7 allows user-assisted remote attackers to execute arbitrary JavaScript code w…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0235 Published 2012-08-29 Fixed CWE-94

TI-2012-03398 CVE-2012-3978 · GHSA-rj2q-vc79-g8v7

The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before…

LOW 34

The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the securi…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02298 Published 2012-08-29 Fixed CWE-264

TI-2012-03393 CVE-2012-3972 · GHSA-cfqg-h3x9-x87c

The format-number functionality in the XSLT implementation in Mozilla Firefox before…

LOW 30

The format-number functionality in the XSLT implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows rem…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03957 Published 2012-08-29 Fixed CWE-200