Ubuntu 14.04 LTS / 16.04 LTS : Thunderbird vulnerabilities (USN-3112-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3112-1 advisory. Catalin Dumitru discovered that URLs of resources loaded after a navigation start could be leaked to the following page via the Resource Timi...

CVE-2016-5284

Mozilla Firefox before 49.0, Firefox ESR 45.x before 45.4, and Thunderbird 45.4 rely on unintended expiration dates for Preloaded Public Key Pinning, which allows man-in-the-middle attackers to spoof add-on updates by leveraging possession of an X.509 server certificate for addons.mozilla.org...

Ubuntu 14.04 LTS / 16.04 LTS : Thunderbird vulnerabilities (USN-3023-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3023-1 advisory. It was discovered that NSPR incorrectly handled memory allocation. If a user were tricked in to opening a specially crafted message, an...

The vulnerability of the SeaMonkey software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

Multiple vulnerabilities exist in the browser engine of Mozilla Firefox, Firefox ESR, and Thunderbird. These vulnerabilities allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

Multiple vulnerabilities in the browser engine of Mozilla Firefox and Thunderbird allow malicious actors operating remotely to cause service failures memory errors and unexpected application exits, or execute arbitrary code...

The vulnerability of the Thunderbird email client, which allows a malicious individual to execute arbitrary code or trigger a service failure.

Mozilla Thunderbird email client contains numerous vulnerabilities related to memory-related errors. Exploiting these vulnerabilities allows a malicious individual to execute arbitrary code through a specially created website, cause service failures, or trigger an emergency shutdown of the...

Ubuntu 14.04 LTS / 16.04 LTS : Thunderbird vulnerabilities (USN-2973-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2973-1 advisory. Christian Holler, Tyson Smith, and Phil Ringalda discovered multiple memory safety issues in Thunderbird. If a user were tricked in to openin...

Vulnerabilities in the Thunderbird email client, as well as in the Firefox and Firefox ESR browsers, allow attackers to trigger service failures or execute arbitrary code.

The multiple vulnerabilities in the Thunderbird email client’s kernel, as well as in the Firefox and Firefox ESR browsers, are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to cause service interruptions memory corruption, application termination, o...

Vulnerabilities in the Thunderbird email client, as well as in the Firefox and Firefox ESR browsers, allow attackers to trigger service failures or execute arbitrary code.

The multiple vulnerabilities in the Thunderbird email client, as well as in the Firefox and Firefox ESR browsers, are caused by buffer overflows. Exploitation of these vulnerabilities can allow a malicious actor to cause service failures or execute arbitrary code memory corruption, application...

Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2904-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2904-1 advisory. Karthikeyan Bhargavan and Gaetan Leurent discovered that NSS incorrectly allowed MD5 to be used for TLS 1.2 connections. If a remote attacker were able t...

Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2859-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2859-1 advisory. Andrei Vaida, Jesse Ruderman, Bob Clary, and Jesse Ruderman discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening...

Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2754-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2754-1 advisory. Andrew Osmond, Olli Pettay, Andrew Sutherland, Christian Holler, David Major, Andrew McCreight, and Cameron McCormack discovered multiple memory safety...

USN-2673-1 thunderbird vulnerabilities

Karthikeyan Bhargavan discovered that NSS incorrectly handled state transitions for the TLS state machine. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to skip the ServerKeyExchange message and remove the forward-secrecy property...

UBUNTU-CVE-2015-2708

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2552-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2552-1 advisory. Olli Pettay and Boris Zbarsky discovered an issue during anchor navigations in some circumstances. If a user were tricked in to opening a specially craft...

MGASA-2015-0089 Updated firefox and thunderbird packages fix security vulnerabilities

Updated firefox and thunderbird packages fix security vulnerabilities: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user...

USN-2460-1 thunderbird vulnerabilities

Christian Holler and Patrick McManus discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitra...

MGASA-2014-0507 Updated firefox & thunderbird packages fix security vulnerabilities

Updated nss, firefox, and thunderbird packages fix security vulnerabilities: In the QuickDER decoder in NSS before 3.17.3, ASN.1 DER decoding of lengths is too permissive, allowing undetected smuggling of arbitrary data CVE-2014-1569. Several flaws were found in the processing of malformed web...

Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2373-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2373-1 advisory. Bobby Holley, Christian Holler, David Bolter, Byron Campen and Jon Coppeard discovered multiple memory safety issues in Thunderbird. If a user were trick...

Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2330-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2330-1 advisory. Jan de Mooij, Christian Holler, Karl Tomlinson, Randell Jesup, Gary Kwong, Jesse Ruderman and JW Wang discovered multiple memory safety issues in...