Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusUbuntu Security Notice (C) 2015-2020 Canonical, Inc. / NASL script (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.UBUNTU_USN-2603-1.NASL
HistoryMay 19, 2015 - 12:00 a.m.

Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2603-1)

2015-05-1900:00:00
Ubuntu Security Notice (C) 2015-2020 Canonical, Inc. / NASL script (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
15
JSON

Jesse Ruderman, Mats Palmgren, Byron Campen, and Steve Fink discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2015-2708)

Atte Kettunen discovered a buffer overflow during the rendering of SVG content with certain CSS properties in some circumstances. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2015-2710)

Scott Bell discovered a use-afer-free during the processing of text when vertical text is enabled. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird.
(CVE-2015-2713)

Ucha Gobejishvili discovered a buffer overflow when parsing compressed XML content. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Thunderbird.
(CVE-2015-2716).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Ubuntu Security Notice USN-2603-1. The text 
# itself is copyright (C) Canonical, Inc. See 
# <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
# trademark of Canonical, Inc.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(83544);
  script_version("2.11");
  script_set_attribute(attribute:"plugin_modification_date", value:"2023/10/20");

  script_cve_id(
    "CVE-2015-2708",
    "CVE-2015-2710",
    "CVE-2015-2713",
    "CVE-2015-2716"
  );
  script_xref(name:"USN", value:"2603-1");

  script_name(english:"Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2603-1)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Ubuntu host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"Jesse Ruderman, Mats Palmgren, Byron Campen, and Steve Fink discovered
multiple memory safety issues in Thunderbird. If a user were tricked
in to opening a specially crafted message with scripting enabled, an
attacker could potentially exploit these to cause a denial of service
via application crash, or execute arbitrary code with the privileges
of the user invoking Thunderbird. (CVE-2015-2708)

Atte Kettunen discovered a buffer overflow during the rendering of SVG
content with certain CSS properties in some circumstances. If a user
were tricked in to opening a specially crafted message with scripting
enabled, an attacker could potentially exploit this to cause a denial
of service via application crash, or execute arbitrary code with the
privileges of the user invoking Thunderbird. (CVE-2015-2710)

Scott Bell discovered a use-afer-free during the processing of text
when vertical text is enabled. If a user were tricked in to opening a
specially crafted message, an attacker could potentially exploit this
to cause a denial of service via application crash, or execute
arbitrary code with the privileges of the user invoking Thunderbird.
(CVE-2015-2713)

Ucha Gobejishvili discovered a buffer overflow when parsing compressed
XML content. If a user were tricked in to opening a specially crafted
message with scripting enabled, an attacker could potentially exploit
this to cause a denial of service via application crash, or execute
arbitrary code with the privileges of the user invoking Thunderbird.
(CVE-2015-2716).

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.");
  script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/notices/USN-2603-1");
  script_set_attribute(attribute:"solution", value:
"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2015-2716");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2015/05/14");
  script_set_attribute(attribute:"patch_publication_date", value:"2015/05/18");
  script_set_attribute(attribute:"plugin_publication_date", value:"2015/05/19");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-dev");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-globalmenu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-gnome-support");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-af");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ast");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-be");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-bg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-bn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-bn-bd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ca");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-cs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-da");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-de");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-el");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-en");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-en-gb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-en-us");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-es");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-es-ar");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-es-es");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-et");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-eu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-fi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-fr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-fy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-fy-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ga");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ga-ie");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-gd");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-gl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-he");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-hr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-hu");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-hy");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-id");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-is");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-it");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ja");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ka");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ko");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-lt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-mk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nb");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nb-no");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nn-no");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pa");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pa-in");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pt-br");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-pt-pt");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-rm");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ro");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ru");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-si");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sl");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sq");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sv");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-sv-se");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ta");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-ta-lk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-tr");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-uk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-vi");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-zh-cn");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-zh-hans");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-zh-hant");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-zh-tw");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-mozsymbols");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:thunderbird-testsuite");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xul-ext-calendar-timezones");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xul-ext-gdata-provider");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:xul-ext-lightning");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Ubuntu Local Security Checks");

  script_copyright(english:"Ubuntu Security Notice (C) 2015-2020 Canonical, Inc. / NASL script (C) 2015-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");

  exit(0);
}

include('debian_package.inc');

if ( ! get_kb_item('Host/local_checks_enabled') ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_release = get_kb_item('Host/Ubuntu/release');
if ( isnull(os_release) ) audit(AUDIT_OS_NOT, 'Ubuntu');
os_release = chomp(os_release);
if (! ('14.04' >< os_release)) audit(AUDIT_OS_NOT, 'Ubuntu 14.04', 'Ubuntu ' + os_release);
if ( ! get_kb_item('Host/Debian/dpkg-l') ) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Ubuntu', cpu);

var pkgs = [
    {'osver': '14.04', 'pkgname': 'thunderbird', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-dev', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-globalmenu', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-gnome-support', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-af', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ar', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ast', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-be', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-bg', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-bn', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-bn-bd', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-br', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ca', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-cs', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-da', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-de', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-el', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-en', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-en-gb', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-en-us', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-es', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-es-ar', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-es-es', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-et', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-eu', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-fi', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-fr', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-fy', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-fy-nl', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ga', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ga-ie', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-gd', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-gl', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-he', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-hr', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-hu', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-hy', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-id', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-is', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-it', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ja', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ka', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ko', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-lt', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-mk', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-nb', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-nb-no', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-nl', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-nn', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-nn-no', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-pa', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-pa-in', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-pl', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-pt', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-pt-br', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-pt-pt', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-rm', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ro', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ru', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-si', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-sk', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-sl', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-sq', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-sr', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-sv', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-sv-se', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ta', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-ta-lk', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-tr', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-uk', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-vi', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-zh-cn', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-zh-hans', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-zh-hant', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-locale-zh-tw', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-mozsymbols', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'thunderbird-testsuite', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'xul-ext-calendar-timezones', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'xul-ext-gdata-provider', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'},
    {'osver': '14.04', 'pkgname': 'xul-ext-lightning', 'pkgver': '1:31.7.0+build1-0ubuntu0.14.04.1'}
];

var flag = 0;
foreach package_array ( pkgs ) {
  var osver = NULL;
  var pkgname = NULL;
  var pkgver = NULL;
  if (!empty_or_null(package_array['osver'])) osver = package_array['osver'];
  if (!empty_or_null(package_array['pkgname'])) pkgname = package_array['pkgname'];
  if (!empty_or_null(package_array['pkgver'])) pkgver = package_array['pkgver'];
  if (osver && pkgname && pkgver) {
    if (ubuntu_check(osver:osver, pkgname:pkgname, pkgver:pkgver)) flag++;
  }
}

if (flag)
{
  security_report_v4(
    port       : 0,
    severity   : SECURITY_HOLE,
    extra      : ubuntu_report_get()
  );
  exit(0);
}
else
{
  var tested = ubuntu_pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'thunderbird / thunderbird-dev / thunderbird-globalmenu / etc');
}
VendorProductVersionCPE
canonicalubuntu_linuxthunderbird-locale-nbp-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nb
canonicalubuntu_linuxthunderbird-locale-nb-nop-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nb-no
canonicalubuntu_linuxthunderbird-locale-nlp-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nl
canonicalubuntu_linuxthunderbird-locale-nnp-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-nn
canonicalubuntu_linuxthunderbird-locale-zh-hansp-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-zh-hans
canonicalubuntu_linuxthunderbird-locale-zh-hantp-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-zh-hant
canonicalubuntu_linuxthunderbird-locale-zh-twp-cpe:/a:canonical:ubuntu_linux:thunderbird-locale-zh-tw
canonicalubuntu_linuxthunderbird-mozsymbolsp-cpe:/a:canonical:ubuntu_linux:thunderbird-mozsymbols
canonicalubuntu_linuxthunderbird-testsuitep-cpe:/a:canonical:ubuntu_linux:thunderbird-testsuite
canonicalubuntu_linuxxul-ext-calendar-timezonesp-cpe:/a:canonical:ubuntu_linux:xul-ext-calendar-timezones
Rows per page:
1-10 of 811

Related

oraclelinux 3
openvas 42
nessus 51
redhat 4
centos 3
ubuntu 2
osv 3
debian 3
veracode 6
archlinux 3
suse 4
mageia 2
cve 6
prion 6
mozilla 4
ubuntucve 6
ibm 21
securityvulns 1
kaspersky 1
freebsd 2
f5 4
debiancve 2
amazon 1
alpinelinux 1
redhatcve 1
slackware 1
gentoo 1
oraclelinux
oraclelinux
thunderbird security update
2015-05-19 00:00:00
firefox security update
2015-05-13 00:00:00
expat security update
2020-04-06 00:00:00
openvas
openvas
CentOS Update for thunderbird CESA-2015:1012 centos7
2015-06-09 00:00:00
RedHat Update for thunderbird RHSA-2015:1012-01
2015-06-09 00:00:00
Ubuntu: Security Advisory (USN-2603-1)
2015-06-09 00:00:00
nessus
nessus
Firefox ESR 31.x < 31.7 Multiple Vulnerabilities (Mac OS X)
2015-05-13 00:00:00
Mozilla Thunderbird < 31.7 Multiple Vulnerabilities (Mac OS X)
2015-05-14 00:00:00
Scientific Linux Security Update : thunderbird on SL5.x, SL6.x, SL7.x i386/x86_64 (20150518)
2015-05-19 00:00:00
redhat
redhat
(RHSA-2015:1012) Important: thunderbird security update
2015-05-18 00:00:00
(RHSA-2015:0988) Critical: firefox security update
2015-05-12 00:00:00
(RHSA-2020:2508) Moderate: expat security update
2020-06-10 16:46:54
centos
centos
thunderbird security update
2015-05-18 14:07:12
firefox security update
2015-05-13 00:01:13
expat security update
2020-04-08 17:58:10
ubuntu
ubuntu
Thunderbird vulnerabilities
2015-05-18 00:00:00
Firefox vulnerabilities
2015-05-13 00:00:00
osv
osv
icedove - security update
2015-05-19 00:00:00
expat - security update
2015-07-25 00:00:00
CVE-2016-4472
2016-06-30 17:59:00
debian
debian
[SECURITY] [DSA 3264-1] icedove security update
2015-05-19 21:12:26
[SECURITY] [DSA 3260-1] iceweasel security update
2015-05-13 17:22:46
[SECURITY] [DLA 281-1] expat security update
2015-07-25 14:17:27
veracode
veracode
Arbitrary Code Execution
2019-05-02 05:39:09
Arbitrary Code Execution
2019-05-02 05:39:09
Arbitrary Code Execution
2019-05-02 05:39:10
archlinux
archlinux
thunderbird: multiple issues
2015-05-18 00:00:00
firefox: multiple issues
2015-05-13 00:00:00
expat: arbitrary code execution
2016-03-24 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2015-06-01 15:05:51
Security update for MozillaFirefox (important)
2015-05-28 12:05:02
Update to Firefox 31.7.0esr (important)
2015-05-18 13:04:51
mageia
mageia
Updated Firefox, Thunderbird & sqlite3 packages fix security vulnerabilities
2015-05-18 22:08:05
Updated iceape packages fix security vulnerabilities
2015-09-08 10:20:40
cve
cve
CVE-2015-2710
2015-05-14 10:59:00
CVE-2015-2708
2015-05-14 10:59:00
CVE-2015-2713
2015-05-14 10:59:00
prion
prion
Heap overflow
2015-05-14 10:59:00
Memory corruption
2015-05-14 10:59:00
Memory corruption
2015-05-14 10:59:00
mozilla
mozilla
Buffer overflow with SVG content and CSS — Mozilla
2015-05-12 00:00:00
Use-after-free during text processing with vertical text enabled — Mozilla
2015-05-12 00:00:00
Buffer overflow when parsing compressed XML — Mozilla
2015-05-12 00:00:00
ubuntucve
ubuntucve
CVE-2015-2710
2015-05-13 00:00:00
CVE-2015-2708
2015-05-13 00:00:00
CVE-2015-2713
2015-05-13 00:00:00
ibm
ibm
Security Bulletin: IBM MQ Appliance is affected by a buffer overflow vulnerability (CVE-2015-2716)
2020-07-23 21:34:53
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Standards Processing Engine and IBM Transformation Extender Advanced (CVE-2015-1283)
2022-05-15 12:11:44
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Netcool Configuration Manager(CVE-2015-1283)
2019-01-22 16:30:15
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2015-05-13 00:00:00
kaspersky
kaspersky
KLA10584 Multiple vulnerabilities in Mozilla products
2015-05-12 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2015-05-12 00:00:00
expat2 -- denial of service
2016-06-09 00:00:00
f5
f5
K50459349 : Expat XML library vulnerability CVE-2015-2716
2017-02-10 00:00:00
K15104541 : Expat XML library vulnerability CVE-2015-1283
2016-10-11 00:00:00
SOL22232964 - Expat XML library vulnerability CVE-2016-4472
2016-10-21 00:00:00
debiancve
debiancve
CVE-2015-1283
2015-07-23 00:59:00
CVE-2016-4472
2016-06-30 17:59:00
amazon
amazon
Medium: expat
2020-05-11 20:41:00
alpinelinux
alpinelinux
CVE-2016-4472
2016-06-30 17:59:00
redhatcve
redhatcve
CVE-2016-4472
2016-06-09 09:48:44
slackware
slackware
[slackware-security] expat
2016-12-24 19:24:21
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2016-05-31 00:00:00
JSON
Related for UBUNTU_USN-2603-1.NASL
oraclelinux3openvas42nessus51redhat4centos3ubuntu2osv3debian3veracode6archlinux3suse4mageia2cve6prion6mozilla4ubuntucve6ibm21securityvulns1kaspersky1freebsd2f54debiancve2amazon1alpinelinux1redhatcve1slackware1gentoo1