Anfälligkeitssuche        Suche in 172616 CVE Beschreibungen
und 81291 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:
Kategorie:Red Hat Local Security Checks
Titel:RedHat Update for thunderbird RHSA-2013:0145-01
Zusammenfassung:The remote host is missing an update for the 'thunderbird'; package(s) announced via the referenced advisory.
The remote host is missing an update for the 'thunderbird'
package(s) announced via the referenced advisory.

Vulnerability Insight:
Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the processing of malformed content. Malicious
content could cause Thunderbird to crash or, potentially, execute arbitrary
code with the privileges of the user running Thunderbird. (CVE-2013-0744,
CVE-2013-0746, CVE-2013-0750, CVE-2013-0753, CVE-2013-0754, CVE-2013-0762,
CVE-2013-0766, CVE-2013-0767, CVE-2013-0769)

A flaw was found in the way Chrome Object Wrappers were implemented.
Malicious content could be used to cause Thunderbird to execute arbitrary
code via plug-ins installed in Thunderbird. (CVE-2013-0758)

A flaw in the way Thunderbird displayed URL values could allow malicious
content or a user to perform a phishing attack. (CVE-2013-0759)

An information disclosure flaw was found in the way certain JavaScript
functions were implemented in Thunderbird. An attacker could use this flaw
to bypass Address Space Layout Randomization (ASLR) and other security
restrictions. (CVE-2013-0748)

Red Hat would like to thank the Mozilla project for reporting these issues.
Upstream acknowledges Atte Kettunen, Boris Zbarsky, pa_kt, regenrecht,
Abhishek Arya, Christoph Diehl, Christian Holler, Mats Palmgren, Chiaki
Ishikawa, Mariusz Mlynski, Masato Kinugawa, and Jesse Ruderman as the
original reporters of these issues.

Note: All issues except CVE-2013-0744, CVE-2013-0753, and CVE-2013-0754
cannot be exploited by a specially-crafted HTML mail message as JavaScript
is disabled by default for mail messages. They could be exploited another
way in Thunderbird, for example, when viewing the full remote content of an
RSS feed.

All Thunderbird users should upgrade to this updated package, which
contains Thunderbird version 10.0.12 ESR, which corrects these issues.
After installing the update, Thunderbird must be restarted for the changes
to take effect.

Affected Software/OS:
thunderbird on Red Hat Enterprise Linux Desktop (v. 6),
Red Hat Enterprise Linux Workstation (v. 6)

Please Install the Updated Packages.

CVSS Score:

CVSS Vector:

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2013-0744
RedHat Security Advisories: RHSA-2013:0144
RedHat Security Advisories: RHSA-2013:0145
SuSE Security Announcement: SUSE-SU-2013:0048 (Google Search)
SuSE Security Announcement: SUSE-SU-2013:0049 (Google Search)
SuSE Security Announcement: openSUSE-SU-2013:0131 (Google Search)
SuSE Security Announcement: openSUSE-SU-2013:0149 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2013-0746
Common Vulnerability Exposure (CVE) ID: CVE-2013-0748
Common Vulnerability Exposure (CVE) ID: CVE-2013-0750
Common Vulnerability Exposure (CVE) ID: CVE-2013-0753
Common Vulnerability Exposure (CVE) ID: CVE-2013-0754
Common Vulnerability Exposure (CVE) ID: CVE-2013-0758
Common Vulnerability Exposure (CVE) ID: CVE-2013-0759
Common Vulnerability Exposure (CVE) ID: CVE-2013-0762
BugTraq ID: 57193
Common Vulnerability Exposure (CVE) ID: CVE-2013-0766
BugTraq ID: 57194
Common Vulnerability Exposure (CVE) ID: CVE-2013-0767
BugTraq ID: 57195
Common Vulnerability Exposure (CVE) ID: CVE-2013-0769
CopyrightCopyright (c) 2013 Greenbone Networks GmbH

Dies ist nur einer von 81291 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.