Red Hat Security AdvisoryRHSA-2016:0001
thunderbird security update
Released 2016-01-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) thunderbird-38.5.0-1.el7_2
- Red Hat Enterprise Linux Desktop (v. 5 client) thunderbird-38.5.0-1.el5_11, thunderbird-38.5.0-1.el5_11.i386
- Red Hat Enterprise Linux Desktop (v. 6) thunderbird-38.5.0-1.el6_7
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) thunderbird-38.5.0-1.el5_11, thunderbird-38.5.0-1.el5_11.i386
- Red Hat Enterprise Linux Server Optional (v. 6) thunderbird-38.5.0-1.el6_7
- Red Hat Enterprise Linux Server Optional (v. 7) thunderbird-38.5.0-1.el7_2
- Red Hat Enterprise Linux Workstation (v. 6) thunderbird-38.5.0-1.el6_7
- Red Hat Enterprise Linux Workstation (v. 7) thunderbird-38.5.0-1.el7_2
Fixes 5 records
Priority MEDIUM 52
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to cause a denial of service (memory corruption and application crash) or…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.0602 · Published 2015-12-16 · Fixed CWE-119
Priority MEDIUM 49
Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 might allow remote attackers to obtain sensitive information, cause a denial of service,…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03174 · Published 2015-12-16 · Fixed CWE-189
Priority MEDIUM 40
Integer overflow in the mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allows remote attackers to execute arbitrary code by triggering a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04049 · Published 2015-12-16 · Fixed CWE-189
Priority LOW 37
Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04075 · Published 2015-12-16 · Fixed CWE-189
Priority LOW 32
Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow remote attackers to bypass the Same Origin Policy via data: and view-source: URIs.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06058 · Published 2015-12-16 · Fixed CWE-200
THREATIST.IORead the docs