Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1020-1
HistoryDec 09, 2010 - 12:00 a.m.

Thunderbird vulnerabilities

2010-12-0900:00:00
ubuntu.com
39

10 High

AI Score

Confidence

High

0.458 Medium

EPSS

Percentile

97.4%

JSON

Releases

  • Ubuntu 10.10
  • Ubuntu 10.04

Packages

  • thunderbird - mail/news client with RSS and integrated spam filter support
  • thunderbird-locales - Thunderbird Afrikaans language/region package

Details

Jesse Ruderman, Andreas Gal, Nils, Brian Hackett, and Igor Bukanov
discovered several memory issues in the browser engine. An attacker could
exploit these to crash THunderbird or possibly run arbitrary code as the
user invoking the program. (CVE-2010-3776, CVE-2010-3777, CVE-2010-3778)

Marc Schoenefeld and Christoph Diehl discovered several problems when
handling downloadable fonts. The new OTS font sanitizing library was added
to mitigate these issues. (CVE-2010-3768)

OSVersionArchitecturePackageVersionFilename
Ubuntu10.10noarchthunderbird< 3.1.7+build3+nobinonly-0ubuntu0.10.10.1UNKNOWN
Ubuntu10.10noarchthunderbird-dbg< 3.1.7+build3+nobinonly-0ubuntu0.10.10.1UNKNOWN
Ubuntu10.10noarchthunderbird-dev< 3.1.7+build3+nobinonly-0ubuntu0.10.10.1UNKNOWN
Ubuntu10.10noarchthunderbird-gnome-support< 3.1.7+build3+nobinonly-0ubuntu0.10.10.1UNKNOWN
Ubuntu10.10noarchthunderbird-gnome-support-dbg< 3.1.7+build3+nobinonly-0ubuntu0.10.10.1UNKNOWN
Ubuntu10.04noarchthunderbird< 3.1.7+build3+nobinonly-0ubuntu0.10.04.1UNKNOWN
Ubuntu10.04noarchthunderbird-dbg< 3.1.7+build3+nobinonly-0ubuntu0.10.04.1UNKNOWN
Ubuntu10.04noarchthunderbird-dev< 3.1.7+build3+nobinonly-0ubuntu0.10.04.1UNKNOWN
Ubuntu10.04noarchthunderbird-gnome-support< 3.1.7+build3+nobinonly-0ubuntu0.10.04.1UNKNOWN
Ubuntu10.04noarchthunderbird-gnome-support-dbg< 3.1.7+build3+nobinonly-0ubuntu0.10.04.1UNKNOWN

Related

openvas 78
mozilla 2
nessus 50
fedora 16
redhat 4
oraclelinux 4
securityvulns 3
cvelist 4
cve 4
prion 4
ubuntucve 4
veracode 3
suse 2
freebsd 1
centos 3
debian 1
gentoo 1
openvas
openvas
Ubuntu Update for Thunderbird vulnerabilities USN-1020-1
2010-12-23 00:00:00
Ubuntu: Security Advisory (USN-1020-1)
2010-12-23 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:258 (mozilla-thunderbird)
2010-12-28 00:00:00
mozilla
mozilla
Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16) — Mozilla
2010-12-09 00:00:00
Add support for OTS font sanitizer — Mozilla
2010-12-09 00:00:00
nessus
nessus
RHEL 6 : thunderbird (RHSA-2010:0969)
2010-12-10 00:00:00
Mozilla Thunderbird < 3.0.11 Multiple Vulnerabilities
2010-12-10 00:00:00
Mozilla Thunderbird 3.1.x < 3.1.7 Multiple Vulnerabilities
2010-12-10 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: thunderbird-3.1.7-2.fc13
2010-12-13 20:10:19
[SECURITY] Fedora 14 Update: thunderbird-3.1.7-2.fc14
2010-12-12 00:05:37
[SECURITY] Fedora 14 Update: firefox-3.6.13-1.fc14
2010-12-10 20:27:49
redhat
redhat
(RHSA-2010:0969) Moderate: thunderbird security update
2010-12-09 00:00:00
(RHSA-2010:0966) Critical: firefox security update
2010-12-09 00:00:00
(RHSA-2010:0968) Moderate: thunderbird security update
2010-12-09 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2011-02-10 00:00:00
firefox security update
2010-12-10 00:00:00
thunderbird security update
2010-12-10 00:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-74
2010-12-10 00:00:00
Mozilla Foundation Security Advisory 2010-78
2010-12-10 00:00:00
Mozilla Firefox / Thinderbird / Seamonkey multiple security vulnerabilities
2010-12-10 00:00:00
cvelist
cvelist
CVE-2010-3778
2010-12-10 18:00:00
CVE-2010-3768
2010-12-10 18:00:00
CVE-2010-3777
2010-12-10 18:00:00
cve
cve
CVE-2010-3768
2010-12-10 19:00:02
CVE-2010-3778
2010-12-10 19:00:02
CVE-2010-3777
2010-12-10 19:00:02
prion
prion
Code injection
2010-12-10 19:00:00
Memory corruption
2010-12-10 19:00:00
Memory corruption
2010-12-10 19:00:00
ubuntucve
ubuntucve
CVE-2010-3768
2010-12-09 00:00:00
CVE-2010-3778
2010-12-09 00:00:00
CVE-2010-3777
2010-12-09 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:52:29
Arbitrary Code Execution
2020-04-10 00:52:36
Arbitrary Code Execution
2020-04-10 00:50:54
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2011-01-05 11:25:44
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2011-03-15 12:02:21
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-12-09 00:00:00
centos
centos
firefox security update
2011-01-27 08:53:21
thunderbird security update
2011-01-27 08:58:08
seamonkey security update
2011-01-27 08:55:30
debian
debian
[BSA-013] Security Update for iceweasel
2011-01-03 06:30:25
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

10 High

AI Score

Confidence

High

0.458 Medium

EPSS

Percentile

97.4%

JSON
Related for USN-1020-1
openvas78mozilla2nessus50fedora16redhat4oraclelinux4securityvulns3cvelist4cve4prion4ubuntucve4veracode3suse2freebsd1centos3debian1gentoo1