icedove - several

2012-06-2400:00:00

Google

osv.dev

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.046 Low

EPSS

Percentile

91.4%

JSON

Several vulnerabilities have been discovered in Icedove, the Debian
version of the Mozilla Thunderbird mail/news client. There were
miscellaneous memory safety hazards
(CVE-2012-1937,
CVE-2012-1939) and
a use-after-free issue
(CVE-2012-1940).

For the stable distribution (squeeze), these problems have been fixed
in version 3.0.11-1+squeeze11.

We recommend that you upgrade your icedove packages.

CPENameOperatorVersion
icedoveeq3.0.11-1
icedoveeq3.0.11-1+squeeze1
icedoveeq3.0.11-1+squeeze10
icedoveeq3.0.11-1+squeeze2
icedoveeq3.0.11-1+squeeze3
icedoveeq3.0.11-1+squeeze4
icedoveeq3.0.11-1+squeeze5
icedoveeq3.0.11-1+squeeze6
icedoveeq3.0.11-1+squeeze7
icedoveeq3.0.11-1+squeeze8

Name	Operator	Version
icedove	eq	3.0.11-1
icedove	eq	3.0.11-1+squeeze1
icedove	eq	3.0.11-1+squeeze10
icedove	eq	3.0.11-1+squeeze2
icedove	eq	3.0.11-1+squeeze3
icedove	eq	3.0.11-1+squeeze4
icedove	eq	3.0.11-1+squeeze5
icedove	eq	3.0.11-1+squeeze6
icedove	eq	3.0.11-1+squeeze7
icedove	eq	3.0.11-1+squeeze8