(RHSA-2007:0723) Moderate: thunderbird security update

2007-07-1800:00:00

access.redhat.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.938 High

EPSS

Percentile

98.9%

JSON

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the way Thunderbird processed certain malformed
JavaScript code. A malicious HTML email message containing JavaScript code
could cause Thunderbird to crash or potentially execute arbitrary code as
the user running Thunderbird. JavaScript support is disabled by default in
Thunderbird; these issues are not exploitable unless the user has enabled
JavaScript. (CVE-2007-3089, CVE-2007-3734, CVE-2007-3735, CVE-2007-3736,
CVE-2007-3737, CVE-2007-3738)

Users of Thunderbird are advised to upgrade to these erratum packages,
which contain backported patches that correct these issues.

OSVersionArchitecturePackageVersionFilename
RedHat4s390thunderbird< 1.5.0.12-0.3.el4thunderbird-1.5.0.12-0.3.el4.s390.rpm
RedHat4x86_64thunderbird< 1.5.0.12-0.3.el4thunderbird-1.5.0.12-0.3.el4.x86_64.rpm
RedHat4ia64thunderbird< 1.5.0.12-0.3.el4thunderbird-1.5.0.12-0.3.el4.ia64.rpm
RedHat5i386thunderbird< 1.5.0.12-3.el5thunderbird-1.5.0.12-3.el5.i386.rpm
RedHat4i386thunderbird< 1.5.0.12-0.3.el4thunderbird-1.5.0.12-0.3.el4.i386.rpm
RedHat4srcthunderbird< 1.5.0.12-0.3.el4thunderbird-1.5.0.12-0.3.el4.src.rpm
RedHat5x86_64thunderbird< 1.5.0.12-3.el5thunderbird-1.5.0.12-3.el5.x86_64.rpm
RedHat4s390xthunderbird< 1.5.0.12-0.3.el4thunderbird-1.5.0.12-0.3.el4.s390x.rpm
RedHat4ppcthunderbird< 1.5.0.12-0.3.el4thunderbird-1.5.0.12-0.3.el4.ppc.rpm
RedHat5srcthunderbird< 1.5.0.12-3.el5thunderbird-1.5.0.12-3.el5.src.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	4	s390	thunderbird	< 1.5.0.12-0.3.el4	thunderbird-1.5.0.12-0.3.el4.s390.rpm
RedHat	4	x86_64	thunderbird	< 1.5.0.12-0.3.el4	thunderbird-1.5.0.12-0.3.el4.x86_64.rpm
RedHat	4	ia64	thunderbird	< 1.5.0.12-0.3.el4	thunderbird-1.5.0.12-0.3.el4.ia64.rpm
RedHat	5	i386	thunderbird	< 1.5.0.12-3.el5	thunderbird-1.5.0.12-3.el5.i386.rpm
RedHat	4	i386	thunderbird	< 1.5.0.12-0.3.el4	thunderbird-1.5.0.12-0.3.el4.i386.rpm
RedHat	4	src	thunderbird	< 1.5.0.12-0.3.el4	thunderbird-1.5.0.12-0.3.el4.src.rpm
RedHat	5	x86_64	thunderbird	< 1.5.0.12-3.el5	thunderbird-1.5.0.12-3.el5.x86_64.rpm
RedHat	4	s390x	thunderbird	< 1.5.0.12-0.3.el4	thunderbird-1.5.0.12-0.3.el4.s390x.rpm
RedHat	4	ppc	thunderbird	< 1.5.0.12-0.3.el4	thunderbird-1.5.0.12-0.3.el4.ppc.rpm
RedHat	5	src	thunderbird	< 1.5.0.12-3.el5	thunderbird-1.5.0.12-3.el5.src.rpm