Thunderbird vulnerabilities

2015-08-2500:00:00

ubuntu.com

8.9 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.053 Low

EPSS

Percentile

93.0%

JSON

Releases

Ubuntu 15.04
Ubuntu 14.04 ESM
Ubuntu 12.04

Packages

thunderbird - Mozilla Open Source mail and newsgroup client

Details

Gary Kwong, Christian Holler, and Byron Campen discovered multiple memory
safety issues in Thunderbird. If a user were tricked in to opening a
specially crafted message, an attacker could potentially exploit these to
cause a denial of service via application crash, or execute arbitrary code
with the privileges ofthe user invoking Thunderbird. (CVE-2015-4473)

Ronald Crane reported 3 security issues. If a user were tricked in to
opening a specially crafted message, an attacker could potentially
exploit these, in combination with another security vulnerability, to
cause a denial of service via application crash, or execute arbitrary
code with the privileges of the user invoking Thunderbird. (CVE-2015-4487,
CVE-2015-4488, CVE-2015-4489)

Gustavo Grieco discovered a heap overflow in gdk-pixbuf. If a user were
tricked in to opening a specially crafted message, an attacker could
potentially exploit this to cause a denial of service via application
crash or execute arbitrary code with the priviliges of the user invoking
Thunderbird. (CVE-2015-4491)

OSVersionArchitecturePackageVersionFilename
Ubuntu15.04noarchthunderbird< 1:38.2.0+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchthunderbird-dbg< 1:38.2.0+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchthunderbird-dbgsym< 1:38.2.0+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchthunderbird-dev< 1:38.2.0+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchthunderbird-dev-dbgsym< 1:38.2.0+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchthunderbird-globalmenu< 1:38.2.0+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchthunderbird-gnome-support< 1:38.2.0+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchthunderbird-gnome-support-dbg< 1:38.2.0+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchthunderbird-locale-af< 1:38.2.0+build1-0ubuntu0.15.04.1UNKNOWN
Ubuntu15.04noarchthunderbird-locale-ar< 1:38.2.0+build1-0ubuntu0.15.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	15.04	noarch	thunderbird	< 1:38.2.0+build1-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	thunderbird-dbg	< 1:38.2.0+build1-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	thunderbird-dbgsym	< 1:38.2.0+build1-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	thunderbird-dev	< 1:38.2.0+build1-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	thunderbird-dev-dbgsym	< 1:38.2.0+build1-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	thunderbird-globalmenu	< 1:38.2.0+build1-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	thunderbird-gnome-support	< 1:38.2.0+build1-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	thunderbird-gnome-support-dbg	< 1:38.2.0+build1-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	thunderbird-locale-af	< 1:38.2.0+build1-0ubuntu0.15.04.1	UNKNOWN
Ubuntu	15.04	noarch	thunderbird-locale-ar	< 1:38.2.0+build1-0ubuntu0.15.04.1	UNKNOWN