Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1620-2
HistoryOct 30, 2012 - 12:00 a.m.

Thunderbird vulnerabilities

2012-10-3000:00:00
ubuntu.com
27

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

8.9 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.4%

JSON

Releases

  • Ubuntu 12.10
  • Ubuntu 12.04
  • Ubuntu 11.10
  • Ubuntu 10.04

Packages

  • thunderbird - Mozilla Open Source mail and newsgroup client

Details

USN-1620-1 fixed vulnerabilities in Firefox. This update provides the
corresponding updates for Thunderbird. Please note that Thunderbird is only
affected by window.location issues through RSS feeds and extensions that
load web content.

Original advisory details:

Mariusz Mlynski and others discovered several flaws in Firefox that allowed
a remote attacker to conduct cross-site scripting (XSS) attacks.
(CVE-2012-4194, CVE-2012-4195)

Antoine Delignat-Lavaud discovered a flaw in the way Firefox handled the
Location object. If a user were tricked into opening a specially crafted
page, a remote attacker could exploit this to bypass security protections
and perform cross-origin reading of the Location object. (CVE-2012-4196)

OSVersionArchitecturePackageVersionFilename
Ubuntu12.10noarchthunderbird< 16.0.2+build1-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchthunderbird-dbg< 16.0.2+build1-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchthunderbird-dev< 16.0.2+build1-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchthunderbird-globalmenu< 16.0.2+build1-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchthunderbird-gnome-support< 16.0.2+build1-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchthunderbird-gnome-support-dbg< 16.0.2+build1-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchthunderbird-locale-af< 1:16.0.2+build1-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchthunderbird-locale-ar< 1:16.0.2+build1-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchthunderbird-locale-ast< 1:16.0.2+build1-0ubuntu0.12.10.1UNKNOWN
Ubuntu12.10noarchthunderbird-locale-be< 1:16.0.2+build1-0ubuntu0.12.10.1UNKNOWN
Rows per page:
1-10 of 2471

Related

nessus 28
openvas 46
veracode 3
ubuntu 1
freebsd 1
oraclelinux 2
centos 2
redhat 2
suse 3
mozilla 1
prion 3
cve 3
nvd 3
cvelist 3
ubuntucve 3
fedora 1
ibm 2
securityvulns 1
gentoo 1
nessus
nessus
Thunderbird < 16.0.2 Multiple Vulnerabilities (Mac OS X)
2012-10-29 00:00:00
SuSE 11.2 Security Update : Mozilla Firefox (SAT Patch Number 7004)
2013-01-25 00:00:00
Firefox 10.x < 10.0.10 Multiple Vulnerabilities
2012-10-29 00:00:00
openvas
openvas
Mozilla Firefox ESR Multiple Vulnerabilities - November12 (Mac OS X)
2012-11-02 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities - November12 (Mac OS X)
2012-11-02 00:00:00
Mozilla Firefox ESR Multiple Vulnerabilities - November12 (Windows)
2012-11-02 00:00:00
veracode
veracode
Same-Origin Policy Bypass
2019-05-02 04:43:52
Arbitrary Code Execution
2019-05-02 04:43:52
Cross-site Scripting (XSS)
2019-01-15 08:59:31
ubuntu
ubuntu
Firefox vulnerabilities
2012-10-26 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-10-26 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2012-10-29 00:00:00
firefox security update
2012-10-26 00:00:00
centos
centos
thunderbird security update
2012-10-30 03:07:34
firefox, xulrunner security update
2012-10-27 02:12:20
redhat
redhat
(RHSA-2012:1407) Critical: firefox security update
2012-10-26 00:00:00
(RHSA-2012:1413) Important: thunderbird security update
2012-10-29 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2012-10-31 22:08:42
Mozilla Suite: Update to 16.0.2 (important)
2012-10-30 01:08:34
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
mozilla
mozilla
Fixes for Location object issues — Mozilla
2012-10-26 00:00:00
prion
prion
Code injection
2012-10-29 18:55:00
Cross site scripting
2012-10-29 18:55:00
Cross site scripting
2012-10-29 18:55:00
cve
cve
CVE-2012-4196
2012-10-29 18:55:01
CVE-2012-4195
2012-10-29 18:55:01
CVE-2012-4194
2012-10-29 18:55:01
nvd
nvd
CVE-2012-4196
2012-10-29 18:55:01
CVE-2012-4195
2012-10-29 18:55:01
CVE-2012-4194
2012-10-29 18:55:01
cvelist
cvelist
CVE-2012-4196
2012-10-29 18:00:00
CVE-2012-4194
2012-10-29 18:00:00
CVE-2012-4195
2012-10-29 18:00:00
ubuntucve
ubuntucve
CVE-2012-4196
2012-10-26 00:00:00
CVE-2012-4195
2012-10-26 00:00:00
CVE-2012-4194
2012-10-26 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: seamonkey-2.13.2-2.fc18
2012-11-14 02:12:21
ibm
ibm
Security Bulletin: Storwize V7000 Unified V1.4.1.0 Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
Security Bulletin: SONAS Update Includes Fixes for Multiple Vendor Security Vulnerabilities
2022-09-26 04:23:14
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-10-29 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

8.9 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.4%

JSON
Related for USN-1620-2
nessus28openvas46veracode3ubuntu1freebsd1oraclelinux2centos2redhat2suse3mozilla1prion3cve3nvd3cvelist3ubuntucve3fedora1ibm2securityvulns1gentoo1