Red Hat Security AdvisoryRHSA-2012:1413
thunderbird security update
Released 2012-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Optional Productivity Applications (v. 5 server) thunderbird-10.0.10-1.el5_8, thunderbird-10.0.10-1.el5_8.i386
- Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-10.0.10-1.el5_8, thunderbird-10.0.10-1.el5_8.i386
- Red Hat Enterprise Linux Desktop (v. 6) thunderbird-10.0.10-1.el6_3
- Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-10.0.10-1.el6_3
- Red Hat Enterprise Linux Workstation (v. 6) thunderbird-10.0.10-1.el6_3
Fixes 3 records
Priority LOW 34
Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 allow remote attackers to bypass the Same Origin Policy and read…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03287 · Published 2012-10-29 · Fixed CWE-74
Priority LOW 25
Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to shadow the location…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02835 · Published 2012-10-29 · Fixed CWE-79
Priority LOW 24
The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 does not properly determine…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01902 · Published 2012-10-29 · Fixed CWE-79
THREATIST.IORead the docs