Mozilla Thunderbird < 3.0.1 Multiple Vulnerabilities

2010-03-0400:00:00

Tenable

www.tenable.com

Versions of Mozilla Thunderbird prior to 3.0.1 are affected by the following vulnerabilities :

Multiple crashes can result in arbitrary code execution. (MFSA 2009-65)
Multiple vulnerabilities in ‘liboggplay’ can lead to arbitrary code execution. (MFSA 2009-66)
An integer overflow in the ‘Theora’ video library can lead to a crash or the execution of arbitrary code. (MFSA 2009-67)

Binary data 5354.prm

VendorProductVersionCPE
mozillathunderbirdcpe:/a:mozilla:thunderbird

Vendor	Product	Version	CPE
mozilla	thunderbird		cpe:/a:mozilla:thunderbird

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3388

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3389

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3979

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3980

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3981

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3982

www.mozilla.org/security/announce/2009/mfsa2009-65.html

www.mozilla.org/security/announce/2009/mfsa2009-66.html

www.mozilla.org/security/announce/2009/mfsa2009-67.html

www.mozillamessaging.com/en-US/thunderbird/3.0.1/releasenotes