Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2010:0968
HistoryDec 09, 2010 - 12:00 a.m.

(RHSA-2010:0968) Moderate: thunderbird security update

2010-12-0900:00:00
access.redhat.com
33

EPSS

0.423

Percentile

97.4%

JSON

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the processing of malformed HTML content. HTML
containing malicious content could cause Thunderbird to crash or,
potentially, execute arbitrary code with the privileges of the user running
Thunderbird. (CVE-2010-3767, CVE-2010-3772, CVE-2010-3776)

Note: JavaScript support is disabled by default in Thunderbird. The above
issues are not exploitable unless JavaScript is enabled.

All Thunderbird users should upgrade to this updated package, which
resolves these issues. All running instances of Thunderbird must be
restarted for the update to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat4s390thunderbird< 1.5.0.12-34.el4thunderbird-1.5.0.12-34.el4.s390.rpm
RedHat4ia64thunderbird< 1.5.0.12-34.el4thunderbird-1.5.0.12-34.el4.ia64.rpm
RedHat4s390xthunderbird< 1.5.0.12-34.el4thunderbird-1.5.0.12-34.el4.s390x.rpm
RedHat4ppcthunderbird< 1.5.0.12-34.el4thunderbird-1.5.0.12-34.el4.ppc.rpm
RedHat4i386thunderbird< 1.5.0.12-34.el4thunderbird-1.5.0.12-34.el4.i386.rpm
RedHat5srcthunderbird< 2.0.0.24-13.el5_5thunderbird-2.0.0.24-13.el5_5.src.rpm
RedHat5i386thunderbird< 2.0.0.24-13.el5_5thunderbird-2.0.0.24-13.el5_5.i386.rpm
RedHat5x86_64thunderbird< 2.0.0.24-13.el5_5thunderbird-2.0.0.24-13.el5_5.x86_64.rpm
RedHat4x86_64thunderbird< 1.5.0.12-34.el4thunderbird-1.5.0.12-34.el4.x86_64.rpm
RedHat4srcthunderbird< 1.5.0.12-34.el4thunderbird-1.5.0.12-34.el4.src.rpm

Related

nessus 48
openvas 78
oraclelinux 4
centos 3
redhat 3
zdi 1
ubuntucve 3
mozilla 3
cve 3
veracode 3
cvelist 3
securityvulns 4
prion 3
nvd 3
debian 2
osv 2
fedora 16
ubuntu 3
freebsd 1
suse 2
gentoo 1
nessus
nessus
CentOS 4 : thunderbird (CESA-2010:0968)
2011-01-28 00:00:00
RHEL 4 / 5 : thunderbird (RHSA-2010:0968)
2010-12-10 00:00:00
Scientific Linux Security Update : thunderbird on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
openvas
openvas
RedHat Update for thunderbird RHSA-2010:0968-01
2010-12-23 00:00:00
CentOS Update for thunderbird CESA-2010:0968 centos4 x86_64
2012-07-30 00:00:00
CentOS Update for thunderbird CESA-2010:0968 centos4 i386
2011-01-31 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2010-12-10 00:00:00
seamonkey security update
2010-12-10 00:00:00
firefox security update
2010-12-10 00:00:00
centos
centos
thunderbird security update
2011-01-27 08:58:08
seamonkey security update
2011-01-27 08:55:30
firefox security update
2011-01-27 08:53:21
redhat
redhat
(RHSA-2010:0967) Critical: seamonkey security update
2010-12-09 00:00:00
(RHSA-2010:0966) Critical: firefox security update
2010-12-09 00:00:00
(RHSA-2010:0969) Moderate: thunderbird security update
2010-12-09 00:00:00
zdi
zdi
Mozilla Firefox NewIdArray Integer Overflow Remote Code Execution Vulnerability
2010-12-09 00:00:00
ubuntucve
ubuntucve
CVE-2010-3767
2010-12-09 00:00:00
CVE-2010-3772
2010-12-09 00:00:00
CVE-2010-3776
2010-12-09 00:00:00
mozilla
mozilla
Integer overflow vulnerability in NewIdArray — Mozilla
2010-12-09 00:00:00
Crash and remote code execution using HTML tags inside a XUL tree — Mozilla
2010-12-09 00:00:00
Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16) — Mozilla
2010-12-09 00:00:00
cve
cve
CVE-2010-3767
2010-12-10 19:00:02
CVE-2010-3776
2010-12-10 19:00:02
CVE-2010-3772
2010-12-10 19:00:02
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:50:53
Arbitrary Code Execution
2020-04-10 00:50:54
Arbitrary Code Execution
2020-04-10 00:50:53
cvelist
cvelist
CVE-2010-3767
2010-12-10 18:00:00
CVE-2010-3776
2010-12-10 18:00:00
CVE-2010-3772
2010-12-10 18:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2010-81
2010-12-10 00:00:00
Mozilla Foundation Security Advisory 2010-77
2010-12-10 00:00:00
Mozilla Firefox / Thinderbird / Seamonkey multiple security vulnerabilities
2010-12-10 00:00:00
prion
prion
Integer overflow
2010-12-10 19:00:00
Memory corruption
2010-12-10 19:00:00
Code injection
2010-12-10 19:00:00
nvd
nvd
CVE-2010-3767
2010-12-10 19:00:02
CVE-2010-3772
2010-12-10 19:00:02
CVE-2010-3776
2010-12-10 19:00:02
debian
debian
[SECURITY] [DSA 2132-1] New xulrunner packages fix several vulnerabilities
2010-12-11 12:03:17
[BSA-013] Security Update for iceweasel
2011-01-02 19:45:28
osv
osv
xulrunner - several vulnerabilities
2010-12-11 00:00:00
MozillaThunderbird-45.5.1-1.1 on GA media
2024-06-15 00:00:00
fedora
fedora
[SECURITY] Fedora 13 Update: galeon-2.0.7-36.fc13
2010-12-10 20:25:42
[SECURITY] Fedora 14 Update: perl-Gtk2-MozEmbed-0.08-6.fc14.22
2010-12-10 20:27:49
[SECURITY] Fedora 13 Update: gnome-web-photo-0.9-15.fc13
2010-12-10 20:25:42
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2010-12-09 00:00:00
Thunderbird vulnerabilities
2010-12-09 00:00:00
Xulrunner vulnerabilities
2011-04-30 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2010-12-09 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2011-01-05 11:25:44
Firefox update to 31.1esr (important)
2014-09-09 18:04:16
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00

EPSS

0.423

Percentile

97.4%

JSON
Related for RHSA-2010:0968
nessus48openvas78oraclelinux4centos3redhat3zdi1ubuntucve3mozilla3cve3veracode3cvelist3securityvulns4prion3nvd3debian2osv2fedora16ubuntu3freebsd1suse2gentoo1