Red Hat Security AdvisoryRHSA-2014:0918
thunderbird security update
Released 2014-07-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-24.7.0-1.el5_10, thunderbird-24.7.0-1.el5_10.i386
- Red Hat Enterprise Linux Desktop (v. 6) thunderbird-24.7.0-1.el6_5
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) thunderbird-24.7.0-1.el5_10, thunderbird-24.7.0-1.el5_10.i386
- Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-24.7.0-1.el6_5
- Red Hat Enterprise Linux Workstation (v. 6) thunderbird-24.7.0-1.el6_5
Fixes 4 records
Priority MEDIUM 51
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05591 · Published 2014-07-23 · Fixed
Priority MEDIUM 48
The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does not properly handle the discarding of image data during function executio…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0494 · Published 2014-07-23 · Fixed CWE-94
Priority MEDIUM 48
Use-after-free vulnerability in the nsDocLoader::OnProgress function in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allows remote attackers to execute arbitrary code via vectors…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04907 · Published 2014-07-23 · Fixed
Priority MEDIUM 47
Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to execute arbitrary code via crafted WebGL content constructed with the Cesium JavaScript library.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03758 · Published 2014-07-23 · Fixed CWE-94