openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-1091)

This script is Copyright (C) 2009-2016 Tenable Network Security, Inc.


Synopsis :

The remote openSUSE host is missing a security update.

Description :

Mozilla Thunderbird was updated to the 2.0.0.22 security release. It
fixes various bugs and security issues :

- MFSA-2009-14/CVE-2009-1302/CVE-2009-1303/CVE-2009-1304
CVE-2009-1305 Crashes with evidence of memory corruption
(rv:1.9.0.9)

- MFSA 2009-17/CVE-2009-1307 (bmo#481342) Same-origin
violations when Adobe Flash loaded via view-source:
scheme

- MFSA 2009-24/CVE-2009-1392/CVE-2009-1832/CVE-2009-1833
Crashes with evidence of memory corruption (rv:1.9.0.11)

- MFSA 2009-27/CVE-2009-1836 (bmo#479880) SSL tampering
via non-200 responses to proxy CONNECT requests

- MFSA 2009-29/CVE-2009-1838 (bmo#489131) Arbitrary code
execution using event listeners attached to an element
whose owner document is null

- MFSA 2009-32/CVE-2009-1841 (bmo#479560) JavaScript
chrome privilege escalation

- MFSA 2009-33 (bmo#495057) Crash viewing
multipart/alternative message with text/enhanced part

See also :

https://bugzilla.novell.com/show_bug.cgi?id=515950

Solution :

Update the affected MozillaThunderbird packages.

Risk factor :

High / CVSS Base Score : 9.3
(CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C)
Public Exploit Available : true

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now