Thunderbird vulnerabilities

2006-11-2100:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.46

Percentile

97.5%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10

Details

USN-352-1 fixed a flaw in the verification of PKCS certificate
signatures. Ulrich Kuehn discovered a variant of the original attack
which the original fix did not cover. (CVE-2006-5462)

Various flaws have been reported that allow an attacker to execute
arbitrary code with user privileges by tricking the user into opening a
malicious email containing JavaScript. Please note that JavaScript is
disabled by default for emails, and it is not recommended to enable it.
(CVE-2006-5463, CVE-2006-5464, CVE-2006-5747, CVE-2006-5748)

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchmozilla-thunderbird< 1.5.0.8-0ubuntu0.6.10UNKNOWN
Ubuntu6.06noarchmozilla-thunderbird< 1.5.0.8-0ubuntu0.6.06UNKNOWN
Ubuntu5.10noarchmozilla-thunderbird< 1.5.0.8-0ubuntu0.5.10UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	mozilla-thunderbird	< 1.5.0.8-0ubuntu0.6.10	UNKNOWN
Ubuntu	6.06	noarch	mozilla-thunderbird	< 1.5.0.8-0ubuntu0.6.06	UNKNOWN
Ubuntu	5.10	noarch	mozilla-thunderbird	< 1.5.0.8-0ubuntu0.5.10	UNKNOWN