CentOS 6 / 7 : thunderbird (CESA-2017:3372)

This script is Copyright (C) 2017 Tenable Network Security, Inc.


Synopsis :

The remote CentOS host is missing a security update.

Description :

An update for thunderbird is now available for Red Hat Enterprise
Linux 6 and Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security
impact of Important. A Common Vulnerability Scoring System (CVSS) base
score, which gives a detailed severity rating, is available for each
vulnerability from the CVE link(s) in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 52.5.0.

Security Fix(es) :

* Multiple flaws were found in the processing of malformed web
content. A web page containing malicious content could cause
Thunderbird to crash or, potentially, execute arbitrary code with the
privileges of the user running Thunderbird. (CVE-2017-7826,
CVE-2017-7828, CVE-2017-7830)

Red Hat would like to thank the Mozilla project for reporting these
issues. Upstream acknowledges Christian Holler, David Keeler, Jon
Coppeard, Julien Cristau, Jan de Mooij, Jason Kratzer, Philipp,
Nicholas Nethercote, Oriol Brufau, Andre Bargull, Bob Clary, Jet
Villegas, Randell Jesup, Tyson Smith, Gary Kwong, Ryan VanderMeulen,
Nils, and Jun Kokatsu as the original reporters.

See also :

http://www.nessus.org/u?6062784b
http://www.nessus.org/u?4c3fc5a3

Solution :

Update the affected thunderbird package.

Risk factor :

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 6.9
(CVSS2#E:U/RL:OF/RC:C)
Public Exploit Available : false

Family: CentOS Local Security Checks

Nessus Plugin ID: 105058 ()

Bugtraq ID:

CVE ID: CVE-2017-7826
CVE-2017-7828
CVE-2017-7830

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now