Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2008:0224
HistoryMay 01, 2008 - 10:31 p.m.

thunderbird security update

2008-05-0122:31:15
CentOS Project
lists.centos.org
45

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.047 Low

EPSS

Percentile

92.5%

JSON

CentOS Errata and Security Advisory CESA-2008:0224

Mozilla Thunderbird is a standalone mail and newsgroup client.

A flaw was found in the processing of malformed JavaScript content. An HTML
mail message containing such malicious content could cause Thunderbird to
crash or, potentially, execute arbitrary code as the user running
Thunderbird. (CVE-2008-1380)

Note: JavaScript support is disabled by default in Thunderbird; the above
issue is not exploitable unless JavaScript is enabled.

All Thunderbird users should upgrade to these updated packages, which
contain backported patches to resolve these issues.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2008-May/077040.html
https://lists.centos.org/pipermail/centos-announce/2008-May/077041.html
https://lists.centos.org/pipermail/centos-announce/2008-May/077044.html
https://lists.centos.org/pipermail/centos-announce/2008-May/077045.html
https://lists.centos.org/pipermail/centos-announce/2008-May/077054.html
https://lists.centos.org/pipermail/centos-announce/2008-May/077058.html

Affected packages:
thunderbird

Upstream details at:
https://access.redhat.com/errata/RHSA-2008:0224

Related

openvas 69
nessus 34
fedora 33
osv 4
centos 3
oraclelinux 3
securityvulns 2
seebug 1
debian 4
redhat 3
slackware 1
veracode 1
ubuntu 1
freebsd 1
mozilla 1
prion 1
ubuntucve 1
cert 1
cve 1
gentoo 2
openvas
openvas
RedHat Update for thunderbird RHSA-2008:0224-01
2009-03-06 00:00:00
Fedora Update for kazehakase FEDORA-2008-3249
2009-02-17 00:00:00
Fedora Update for openvrml FEDORA-2008-3249
2009-02-17 00:00:00
nessus
nessus
Debian DSA-1562-1 : iceape - programming error
2008-05-01 00:00:00
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-5280)
2008-06-09 00:00:00
RHEL 4 / 5 : thunderbird (RHSA-2008:0224)
2008-05-01 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: epiphany-2.18.3-9.fc7
2008-04-22 22:40:41
[SECURITY] Fedora 7 Update: openvrml-0.16.7-5.fc7
2008-04-22 22:40:41
[SECURITY] Fedora 7 Update: firefox-2.0.0.14-1.fc7
2008-04-22 22:40:41
osv
osv
iceape - arbitrary code execution
2008-04-28 00:00:00
xulrunner - arbitrary code execution
2008-04-24 00:00:00
iceweasel - arbitrary code execution
2008-04-23 00:00:00
centos
centos
seamonkey security update
2008-04-17 15:54:11
seamonkey security update
2008-04-18 00:18:42
firefox security update
2008-04-19 13:20:35
oraclelinux
oraclelinux
seamonkey security update
2008-04-17 00:00:00
firefox security update
2008-04-17 00:00:00
thunderbird security update
2008-04-30 00:00:00
securityvulns
securityvulns
Mozilla Firefox memory corruption
2008-04-18 00:00:00
Mozilla Foundation Security Advisory 2008-20
2008-04-18 00:00:00
seebug
seebug
Mozilla Firefox JavaScript垃圾收集器内存破坏漏洞
2008-04-19 00:00:00
debian
debian
[SECURITY] [DSA 1562-1] New iceape packages fix arbitrary code execution
2008-04-28 19:47:46
[SECURITY] [DSA 1555-1] New iceweasel packages fix arbitrary code execution
2008-04-23 17:54:24
[SECURITY] [DSA 1558-1] New xulrunner packages fix arbitrary code execution
2008-04-24 21:21:53
redhat
redhat
(RHSA-2008:0222) Critical: firefox security update
2008-04-16 00:00:00
(RHSA-2008:0224) Moderate: thunderbird security update
2008-04-30 00:00:00
(RHSA-2008:0223) Critical: seamonkey security update
2008-04-16 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2008-04-17 22:44:04
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:20:49
ubuntu
ubuntu
Firefox vulnerabilities
2008-04-22 00:00:00
freebsd
freebsd
firefox -- javascript garbage collector vulnerability
2008-04-16 00:00:00
mozilla
mozilla
Crash in JavaScript garbage collector — Mozilla
2008-04-16 00:00:00
prion
prion
Code injection
2008-04-17 19:05:00
ubuntucve
ubuntucve
CVE-2008-1380
2008-04-17 00:00:00
cert
cert
Mozilla Firefox JavaScript engine fails to properly handle garbage collection
2008-04-18 00:00:00
cve
cve
CVE-2008-1380
2008-04-17 19:05:00
gentoo
gentoo
Mozilla products: Multiple vulnerabilities
2008-08-06 00:00:00
Mozilla products: Multiple vulnerabilities
2008-05-20 00:00:00

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.047 Low

EPSS

Percentile

92.5%

JSON
Related for CESA-2008:0224
openvas69nessus34fedora33osv4centos3oraclelinux3securityvulns2seebug1debian4redhat3slackware1veracode1ubuntu1freebsd1mozilla1prion1ubuntucve1cert1cve1gentoo2