CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
95.0%
Several flaws were found in the processing of malformed content. Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird (CVE-2013-5590, CVE-2013-5597, CVE-2013-5599, CVE-2013-5600, CVE-2013-5601, CVE-2013-5602). It was found that the Thunderbird JavaScript engine incorrectly allocated memory for certain functions. An attacker could combine this flaw with other vulnerabilities to execute arbitrary code with the privileges of the user running Thunderbird (CVE-2013-5595). A flaw was found in the way Thunderbird handled certain Extensible Stylesheet Language Transformations (XSLT) files. An attacker could combine this flaw with other vulnerabilities to execute arbitrary code with the privileges of the user running Thunderbird (CVE-2013-5604). Also, the thunderbird-lightning extension has been updated to a version that is compatible with the updated Thunderbird.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Mageia | 2 | noarch | thunderbird | < 24.1.0-1 | thunderbird-24.1.0-1.mga2 |
Mageia | 2 | noarch | thunderbird-l10n | < 24.1.0-1 | thunderbird-l10n-24.1.0-1.mga2 |
Mageia | 2 | noarch | thunderbird-lightning | < 2.6.2-1 | thunderbird-lightning-2.6.2-1.mga2 |
Mageia | 3 | noarch | thunderbird | < 24.1.0-1 | thunderbird-24.1.0-1.mga3 |
Mageia | 3 | noarch | thunderbird-l10n | < 24.1.0-1 | thunderbird-l10n-24.1.0-1.mga3 |
Mageia | 3 | noarch | thunderbird-lightning | < 2.6.2-1 | thunderbird-lightning-2.6.2-1.mga3 |
www.mozilla.org/security/announce/2013/mfsa2013-100.html
www.mozilla.org/security/announce/2013/mfsa2013-101.html
www.mozilla.org/security/announce/2013/mfsa2013-93.html
www.mozilla.org/security/announce/2013/mfsa2013-95.html
www.mozilla.org/security/announce/2013/mfsa2013-96.html
www.mozilla.org/security/announce/2013/mfsa2013-98.html
www.mozilla.org/security/known-vulnerabilities/thunderbird.html
bugs.mageia.org/show_bug.cgi?id=11562
rhn.redhat.com/errata/RHSA-2013-1480.html