Lucene search
GoogleOSV:DSA-2556-1HistoryOct 07, 2012 - 12:00 a.m.
icedove - several
2012-10-0700:00:00
Google
osv.dev
15
0.174 Low
EPSS
Percentile
96.1%
Several vulnerabilities were discovered in Icedove, Debian’s version
of the Mozilla Thunderbird mail and news client.
This includes several instances of use-after-free and buffer overflow
issues. The reported vulnerabilities could lead to the execution of
arbitrary code, and additionally to the bypass of content-loading
restrictions via the location object.
For the stable distribution (squeeze), this problem has been fixed in
version 3.0.11-1+squeeze13.
For the testing distribution (wheezy), this problem has been fixed in
version 10.0.7-1.
For the unstable distribution (sid), this problem has been fixed in
version 10.0.7-1.
We recommend that you upgrade your icedove packages.
References
Related
openvas
openvas
Debian: Security Advisory (DSA-2553-1)
2013-09-18 00:00:00
Debian: Security Advisory (DSA-2554-1)
2012-10-03 00:00:00
Debian Security Advisory DSA 2553-1 (iceweasel - several vulnerabilities)
2013-09-18 00:00:00
debian
debian
[SECURITY] [DSA 2556-1] icedove security update
2012-10-07 13:13:58
[SECURITY] [DSA 2554-1] iceape security update
2012-09-26 19:00:31
[SECURITY] [DSA 2553-1] iceweasel security update
2012-09-24 17:18:25
osv
osv
iceweasel - several
2012-09-24 00:00:00
iceape - several
2012-09-26 00:00:00
iceape - several
2012-11-04 00:00:00
nessus
nessus
Debian DSA-2553-1 : iceweasel - several vulnerabilities
2012-09-25 00:00:00
Debian DSA-2556-1 : icedove - several vulnerabilities
2012-10-08 00:00:00
Debian DSA-2554-1 : iceape - several vulnerabilities
2012-09-27 00:00:00
centos
centos
thunderbird security update
2012-08-29 12:53:01
firefox, xulrunner security update
2012-08-29 12:43:30
veracode
veracode
Memory Corruption
2019-05-02 04:42:52
Arbitrary Code Execution
2019-05-02 04:42:54
Arbitrary Code Execution
2019-05-02 04:42:58
redhat
redhat
(RHSA-2012:1211) Critical: thunderbird security update
2012-08-29 00:00:00
(RHSA-2012:1210) Critical: firefox security update
2012-08-29 00:00:00
mozilla
mozilla
Use-after-free issues found using Address Sanitizer — Mozilla
2012-08-28 00:00:00
Out-of-bounds read in format-number in XSLT — Mozilla
2012-08-28 00:00:00
Location object security checks bypassed by chrome code — Mozilla
2012-08-28 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2012-08-29 00:00:00
firefox security update
2012-08-29 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2012-08-30 00:00:00
Thunderbird regressions
2012-09-28 00:00:00
Firefox regression
2012-09-11 00:00:00
suse
suse
MozillaFirefox: Update to version 15 (critical)
2012-08-30 12:09:32
MozillaFirefox: Update to version 15 (critical)
2012-08-30 12:09:15
Security update for Mozilla Firefox (important)
2012-09-13 01:08:39
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-09-18 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-08-28 00:00:00
ubuntucve
ubuntucve
cvelist
cvelist
nvd
nvd
cve
cve
prion
prion
Integer overflow
2012-08-29 10:56:00
Heap overflow
2012-08-29 10:56:00
Memory corruption
2012-08-29 10:56:00
