Red Hat Security Advisory

RHSA-2013:0697

thunderbird security update

Released 2013-04-02 · Red Hat rating Important · View on Red Hat →

Fixed in

RHEL Optional Productivity Applications (v. 5 server) thunderbird-17.0.5-1.el5_9, thunderbird-17.0.5-1.el5_9.i386
Red Hat Enterprise Linux Desktop (v. 6) thunderbird-17.0.5-1.el6_4
Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-17.0.5-1.el6_4
Red Hat Enterprise Linux Workstation (v. 6) thunderbird-17.0.5-1.el6_4

Fixes 5 records

TI-2013-00680 CVE-2013-0796 · GHSA-7f9w-h963-rcwv

The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5…

MEDIUM 54

The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 on Linux does not properly interact with Mesa d…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07953 Published 2013-04-03 Partial fix

TI-2013-00672 CVE-2013-0788 · GHSA-v46v-2x9f-cqrx

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before…

MEDIUM 50

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 allow re…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04615 Published 2013-04-03 Partial fix

TI-2013-00679 CVE-2013-0795 · GHSA-7phr-5276-4mqw

The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR…

MEDIUM 49

The System Only Wrapper (SOW) implementation in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 does not prevent use o…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03429 Published 2013-04-03 Partial fix CWE-264

TI-2013-00684 CVE-2013-0800 · GHSA-w5mr-mjj8-pwcp

Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as…

LOW 37

Integer signedness error in the pixman_fill_sse2 function in pixman-sse2.c in Pixman, as distributed with Cairo and used in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderb…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03941 Published 2013-04-03 Partial fix

TI-2013-00677 CVE-2013-0793 · GHSA-cv3q-wvhv-rg74

Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5…

LOW 24

Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 17.0.5, and SeaMonkey before 2.17 do not ensure the correctness of the address bar during history naviga…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0219 Published 2013-04-03 Partial fix CWE-79