Red Hat Security AdvisoryRHSA-2015:1455
thunderbird security update
Released 2015-07-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) thunderbird-31.8.0-1.el7_1
- Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-31.8.0-1.el5_11, thunderbird-31.8.0-1.el5_11.i386
- Red Hat Enterprise Linux Desktop (v. 6) thunderbird-31.8.0-1.el6_6
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) thunderbird-31.8.0-1.el5_11, thunderbird-31.8.0-1.el5_11.i386
- Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-31.8.0-1.el6_6
- Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-31.8.0-1.ael7b_1, thunderbird-31.8.0-1.el7_1
- Red Hat Enterprise Linux Workstation (v. 6) thunderbird-31.8.0-1.el6_6
- Red Hat Enterprise Linux Workstation (v. 7) thunderbird-31.8.0-1.el7_1
Fixes 11 records
Priority MEDIUM 52
Use-after-free vulnerability in the CSPService::ShouldLoad function in the microtask implementation in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allows remote attackers to exe…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05746 · Published 2015-07-06 · Fixed
Priority MEDIUM 52
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of service (memory corruption…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06013 · Published 2015-07-06 · Fixed CWE-119
Priority MEDIUM 52
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 allow remote attackers to cause a denial of servic…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05828 · Published 2015-07-06 · Fixed CWE-119
Priority MEDIUM 51
Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remote attackers to cause…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0551 · Published 2015-07-06 · Fixed CWE-119
Priority MEDIUM 48
The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has unspecified impact an…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02725 · Published 2015-07-06 · Fixed CWE-119
Priority MEDIUM 48
The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from unin…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02654 · Published 2015-07-06 · Fixed CWE-17
Priority MEDIUM 48
The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02654 · Published 2015-07-06 · Fixed CWE-17
Priority MEDIUM 48
The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninit…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02654 · Published 2015-07-06 · Fixed CWE-17
Priority MEDIUM 46
The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0374 · Published 2015-07-06 · Fixed CWE-17
Priority MEDIUM 46
nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to have an unspecified i…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0374 · Published 2015-07-06 · Fixed CWE-17
Priority LOW 23
Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which allows user-assisted ma…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01309 · Published 2015-07-06 · Fixed CWE-310