Tenable5496.PRMMozilla Thunderbird < 3.0.4 Multiple Vulnerabilities
Versions of Mozilla Thunderbird prior to 3.0.4 are affected by the following vulnerabilities :
- Multiple crashes can result in arbitrary code execution. (MFSA 2010-16)
- A select event handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)
- An error exists in the way ‘<option>’ elements are inserted into a XUL tree ‘<optgroup>’. (MFSA 2010-18)
- Session renegotiations are not handled properly, which can be exploited to insert arbitrary plaintext by a man-in-the-middle. (MFSA 2010-22)
- XML documents fail to call certain security checks when loading new content. (MFSA 2010-24)
Binary data 5496.prm| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | thunderbird | cpe:/a:mozilla:thunderbird |
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0173
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0174
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0175
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0176
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0182
www.mozilla.org/security/announce/2010/mfsa2010-16.html
www.mozilla.org/security/announce/2010/mfsa2010-17.html
www.mozilla.org/security/announce/2010/mfsa2010-18.html
www.mozilla.org/security/announce/2010/mfsa2010-19.html
www.mozilla.org/security/announce/2010/mfsa2010-20.html
www.mozilla.org/security/announce/2010/mfsa2010-22.html
www.mozilla.org/security/announce/2010/mfsa2010-24.html
www.mozilla.org/security/known-vulnerabilities/thunderbird30.html#thunderbird3.0.4