Lucene search
UbuntuUSN-1020-1HistoryDec 09, 2010 - 12:00 a.m.
Thunderbird vulnerabilities
2010-12-0900:00:00
ubuntu.com
46
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
10
Confidence
High
EPSS
0.458
Percentile
97.4%
Releases
- Ubuntu 10.10
- Ubuntu 10.04
Packages
- thunderbird - mail/news client with RSS and integrated spam filter support
- thunderbird-locales - Thunderbird Afrikaans language/region package
Details
Jesse Ruderman, Andreas Gal, Nils, Brian Hackett, and Igor Bukanov
discovered several memory issues in the browser engine. An attacker could
exploit these to crash THunderbird or possibly run arbitrary code as the
user invoking the program. (CVE-2010-3776, CVE-2010-3777, CVE-2010-3778)
Marc Schoenefeld and Christoph Diehl discovered several problems when
handling downloadable fonts. The new OTS font sanitizing library was added
to mitigate these issues. (CVE-2010-3768)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 10.10 | noarch | thunderbird | < 3.1.7+build3+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | thunderbird-dbg | < 3.1.7+build3+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | thunderbird-dev | < 3.1.7+build3+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | thunderbird-gnome-support | < 3.1.7+build3+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | thunderbird-gnome-support-dbg | < 3.1.7+build3+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| Ubuntu | 10.04 | noarch | thunderbird | < 3.1.7+build3+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| Ubuntu | 10.04 | noarch | thunderbird-dbg | < 3.1.7+build3+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| Ubuntu | 10.04 | noarch | thunderbird-dev | < 3.1.7+build3+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| Ubuntu | 10.04 | noarch | thunderbird-gnome-support | < 3.1.7+build3+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| Ubuntu | 10.04 | noarch | thunderbird-gnome-support-dbg | < 3.1.7+build3+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
Related
openvas
openvas
Ubuntu: Security Advisory (USN-1020-1)
2010-12-23 00:00:00
Ubuntu Update for Thunderbird vulnerabilities USN-1020-1
2010-12-23 00:00:00
Mandriva Update for mozilla-thunderbird MDVSA-2010:258 (mozilla-thunderbird)
2010-12-28 00:00:00
nessus
nessus
Ubuntu 10.04 LTS / 10.10 : thunderbird, thunderbird-locales vulnerabilities (USN-1020-1)
2010-12-10 00:00:00
Mozilla Thunderbird < 3.0.11 Multiple Vulnerabilities
2010-12-10 00:00:00
Mozilla Thunderbird 3.1.x < 3.1.7 Multiple Vulnerabilities
2010-12-10 00:00:00
redhat
redhat
(RHSA-2010:0969) Moderate: thunderbird security update
2010-12-09 00:00:00
(RHSA-2010:0966) Critical: firefox security update
2010-12-09 00:00:00
(RHSA-2010:0968) Moderate: thunderbird security update
2010-12-09 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2011-02-10 00:00:00
firefox security update
2010-12-10 00:00:00
thunderbird security update
2010-12-10 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: thunderbird-3.1.7-2.fc14
2010-12-12 00:05:37
[SECURITY] Fedora 13 Update: thunderbird-3.1.7-2.fc13
2010-12-13 20:10:19
[SECURITY] Fedora 13 Update: firefox-3.6.13-1.fc13
2010-12-10 20:25:42
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-74
2010-12-10 00:00:00
Mozilla Foundation Security Advisory 2010-78
2010-12-10 00:00:00
Mozilla Firefox / Thinderbird / Seamonkey multiple security vulnerabilities
2010-12-10 00:00:00
mozilla
mozilla
Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16) — Mozilla
2010-12-09 00:00:00
Add support for OTS font sanitizer — Mozilla
2010-12-09 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2010-12-09 00:00:00
Xulrunner vulnerabilities
2011-04-30 00:00:00
cve
cve
nvd
nvd
prion
prion
Code injection
2010-12-10 19:00:00
Memory corruption
2010-12-10 19:00:00
Memory corruption
2010-12-10 19:00:00
ubuntucve
ubuntucve
cvelist
cvelist
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:52:29
Arbitrary Code Execution
2020-04-10 00:52:36
Arbitrary Code Execution
2020-04-10 00:50:54
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-12-09 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2011-01-05 11:25:44
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2011-03-15 12:02:21
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
centos
centos
firefox security update
2011-01-27 08:53:21
thunderbird security update
2011-01-27 08:58:08
seamonkey security update
2011-01-27 08:55:30
debian
debian
[BSA-013] Security Update for iceweasel
2011-01-02 19:45:28
[SECURITY] [DSA 2132-1] New xulrunner packages fix several vulnerabilities
2010-12-11 12:03:17
osv
osv
xulrunner - several vulnerabilities
2010-12-11 00:00:00
MozillaThunderbird-45.5.1-1.1 on GA media
2024-06-15 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
10
Confidence
High
EPSS
0.458
Percentile
97.4%
Related for USN-1020-1