Red Hat Security AdvisoryRHSA-2014:0133
thunderbird security update
Released 2014-02-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-24.3.0-2.el5_10, thunderbird-24.3.0-2.el5_10.i386
- Red Hat Enterprise Linux Desktop (v. 6) thunderbird-24.3.0-2.el6_5
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) thunderbird-24.3.0-2.el5_10, thunderbird-24.3.0-2.el5_10.i386
- Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-24.3.0-2.el6_5
- Red Hat Enterprise Linux Workstation (v. 6) thunderbird-24.3.0-2.el6_5
Fixes 6 records
Priority MEDIUM 52
Use-after-free vulnerability in the imgRequestProxy function in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to execute arbitrary c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07014 · Published 2014-02-06 · Fixed CWE-416
Priority MEDIUM 50
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of serv…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.05461 · Published 2014-02-06 · Fixed
Priority MEDIUM 47
RasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent access to discarded data, which allows remote attackers to execute arbitra…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.06253 · Published 2014-02-06 · Fixed CWE-787
Priority MEDIUM 40
The System Only Wrapper (SOW) implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 does not prevent certain cloning operations, which allows remo…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04564 · Published 2014-02-06 · Fixed
Priority LOW 39
Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to bypass intended restrictions on window objects by leveraging inconsistency in native…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03857 · Published 2014-02-06 · Fixed
Priority LOW 37
The Web workers implementation in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allows remote attackers to bypass the Same Origin Policy and obtain sensitiv…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02316 · Published 2014-02-06 · Fixed CWE-346