Lucene search

K
ubuntuUbuntuUSN-2032-1
HistoryNov 21, 2013 - 12:00 a.m.

Thunderbird vulnerabilities

2013-11-2100:00:00
ubuntu.com
26

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

7.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.101 Low

EPSS

Percentile

94.8%

Releases

  • Ubuntu 13.10
  • Ubuntu 13.04
  • Ubuntu 12.10
  • Ubuntu 12.04

Packages

  • thunderbird - Mozilla Open Source mail and newsgroup client

Details

Multiple security issues were discovered in Thunderbird. If a user were
tricked into connecting to a malicious server, an attacker could possibly
exploit these to cause a denial of service via application crash,
potentially execute arbitrary code, or lead to information disclosure.
(CVE-2013-1741, CVE-2013-2566, CVE-2013-5605, CVE-2013-5607)

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchthunderbird< 1:24.1.1+build1-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchthunderbird-dbg< 1:24.1.1+build1-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchthunderbird-dev< 1:24.1.1+build1-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchthunderbird-globalmenu< 1:24.1.1+build1-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchthunderbird-gnome-support< 1:24.1.1+build1-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchthunderbird-gnome-support-dbg< 1:24.1.1+build1-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchthunderbird-locale-af< 1:24.1.1+build1-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchthunderbird-locale-ar< 1:24.1.1+build1-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchthunderbird-locale-ast< 1:24.1.1+build1-0ubuntu0.13.10.1UNKNOWN
Ubuntu13.10noarchthunderbird-locale-be< 1:24.1.1+build1-0ubuntu0.13.10.1UNKNOWN
Rows per page:
1-10 of 2641

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

7.7 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.101 Low

EPSS

Percentile

94.8%