Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-469-1
HistoryJun 06, 2007 - 12:00 a.m.

Thunderbird vulnerabilities

2007-06-0600:00:00
ubuntu.com
41

7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.97 High

EPSS

Percentile

99.7%

JSON

Releases

  • Ubuntu 7.04
  • Ubuntu 6.10
  • Ubuntu 6.06

Details

Gaëtan Leurent showed a weakness in APOP authentication. An attacker
posing as a trusted server could recover portions of the user’s
password via multiple authentication attempts. (CVE-2007-1558)

Various flaws were discovered in the layout and JavaScript engines. By
tricking a user into opening a malicious email, an attacker could execute
arbitrary code with the user’s privileges. Please note that JavaScript
is disabled by default for emails, and it is not recommended to enable
it. (CVE-2007-2867, CVE-2007-2868)

OSVersionArchitecturePackageVersionFilename
Ubuntu7.04noarchmozilla-thunderbird< 1.5.0.12-0ubuntu0.7.04UNKNOWN
Ubuntu6.10noarchmozilla-thunderbird< 1.5.0.12-0ubuntu0.6.10UNKNOWN
Ubuntu6.06noarchmozilla-thunderbird< 1.5.0.12-0ubuntu0.6.06UNKNOWN

Related

osv 4
nessus 62
openvas 65
fedora 14
debian 4
securityvulns 3
mozilla 2
centos 8
oraclelinux 6
redhat 6
gentoo 1
suse 1
cve 3
prion 3
veracode 3
cert 2
checkpoint_advisories 3
ubuntucve 3
freebsd 2
altlinux 1
debiancve 1
jvn 1
ubuntu 1
osv
osv
icedove - several vulnerabilities
2007-06-13 00:00:00
iceape
2007-06-07 00:00:00
iceweasel - several vulnerabilities
2007-06-14 00:00:00
nessus
nessus
Ubuntu 6.06 LTS / 6.10 / 7.04 : mozilla-thunderbird vulnerabilities (USN-469-1)
2007-11-10 00:00:00
Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:119)
2007-06-14 00:00:00
Fedora 7 : thunderbird-2.0.0.4-1.fc7 (2007-0544)
2007-11-06 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-1305-1)
2008-01-17 00:00:00
Fedora Update for thunderbird FEDORA-2007-0544
2009-02-27 00:00:00
Debian Security Advisory DSA 1305-1 (icedove)
2008-01-17 00:00:00
fedora
fedora
[SECURITY] Fedora 7 Update: thunderbird-2.0.0.4-1.fc7
2007-06-18 22:30:53
[SECURITY] Fedora Core 5 Update: thunderbird-1.5.0.12-1.fc5
2007-05-31 13:06:32
[SECURITY] Fedora Core 6 Update: thunderbird-1.5.0.12-1.fc6
2007-05-31 13:03:59
debian
debian
[SECURITY] [DSA 1305-1] New icedove packages fix several vulnerabilities
2007-06-13 17:34:11
[SECURITY] [DSA 1300-1] New iceape packages fix several vulnerabilities
2007-06-07 20:16:43
[SECURITY] [DSA 1306-1] New xulrunner packages fix several vulnerabilities
2007-06-12 15:57:27
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2007-12
2007-06-01 00:00:00
Mozilla Firefox / Thunderbird / SeaMonkey multiple security vulnerabilities
2007-06-05 00:00:00
Mozilla Foundation Security Advisory 2007-15
2007-06-01 00:00:00
mozilla
mozilla
Crashes with evidence of memory corruption (rv:1.8.0.12/1.8.1.4) — Mozilla
2007-05-30 00:00:00
Security Vulnerability in APOP Authentication — Mozilla
2007-05-30 00:00:00
centos
centos
thunderbird security update
2007-05-31 21:22:54
devhelp, seamonkey security update
2007-05-31 21:23:00
seamonkey security update
2007-05-31 23:03:51
oraclelinux
oraclelinux
Critical: thunderbird security update
2007-05-31 00:00:00
Critical: seamonkey security update
2007-05-31 00:00:00
Moderate: evolution-data-server security update
2007-06-26 00:00:00
redhat
redhat
(RHSA-2007:0401) Critical: thunderbird security update
2007-05-30 00:00:00
(RHSA-2007:0402) Critical: seamonkey security update
2007-05-30 00:00:00
(RHSA-2007:0353) Moderate: evolution security update
2007-05-17 00:00:00
gentoo
gentoo
Mozilla products: Multiple vulnerabilities
2007-06-19 00:00:00
suse
suse
remote code execution in mozilla,MozillaFirefox,MozillaThunderbird
2007-06-27 15:10:40
cve
cve
CVE-2007-2868
2007-06-01 00:30:00
CVE-2007-2867
2007-06-01 00:30:00
CVE-2007-1558
2007-04-16 22:19:00
prion
prion
Heap overflow
2007-06-01 00:30:00
Memory corruption
2007-06-01 00:30:00
Code injection
2007-04-16 22:19:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:18:38
Arbitrary Code Execution
2020-04-10 00:18:37
Information Disclosure
2020-04-10 00:14:27
cert
cert
Mozilla products vulnerable to memory corruption in the JavaScript engine
2007-05-31 00:00:00
Mozilla Layout Engine memory corruption vulnerabilities
2007-05-31 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Products Overflow Event Handling Memory Corruption (CVE-2007-2867)
2010-08-10 00:00:00
Mozilla Firefox SVG pathSegListgetItem Negative Argument Memory Corruption - Ver2 (CVE-2007-2867)
2015-03-26 00:00:00
Mozilla Products SVG Layout Engine Index Parameter Memory Corruption (CVE-2007-2867)
2010-01-18 00:00:00
ubuntucve
ubuntucve
CVE-2007-1558
2007-04-16 00:00:00
CVE-2007-2867
2007-06-01 00:00:00
CVE-2007-2868
2007-06-01 00:00:00
freebsd
freebsd
fetchmail -- insecure APOP authentication
2007-04-06 00:00:00
claws-mail -- APOP vulnerability
2007-04-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package fetchmail version 6.3.8-alt1
2007-04-07 00:00:00
debiancve
debiancve
CVE-2007-1558
2007-04-16 22:19:00
jvn
jvn
JVN#19445002 APOP password recovery vulnerability
2007-04-19 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2007-06-01 00:00:00

7 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.97 High

EPSS

Percentile

99.7%

JSON
Related for USN-469-1
osv4nessus62openvas65fedora14debian4securityvulns3mozilla2centos8oraclelinux6redhat6gentoo1suse1cve3prion3veracode3cert2checkpoint_advisories3ubuntucve3freebsd2altlinux1debiancve1jvn1ubuntu1