Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2006:078)

Critical Nessus Plugin ID 21284


The remote Mandrake Linux host is missing one or more security updates.


A number of vulnerabilities have been discovered in the Mozilla Thunderbird email client that could allow a remote attacker to craft malicious web emails that could take advantage of these issues to execute arbitrary code with elevated privileges, spoof content, and steal local files, or other information. As well, some of these vulnerabilities can be exploited to execute arbitrary code with the privileges of the user running the program.

As well, two crasher bugs have been fixed as well.

The updated packages have been patched to fix these problems.


Update the affected mozilla-thunderbird, mozilla-thunderbird-enigmail and / or mozilla-thunderbird-enigmime packages.

See Also

Plugin Details

Severity: Critical

ID: 21284

File Name: mandrake_MDKSA-2006-078.nasl

Version: $Revision: 1.16 $

Type: local

Published: 2006/04/26

Modified: 2016/11/28

Dependencies: 12634

Risk Information

Risk Factor: Critical


Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:mozilla-thunderbird, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmail, p-cpe:/a:mandriva:linux:mozilla-thunderbird-enigmime, cpe:/o:mandriva:linux:2006

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Patch Publication Date: 2006/04/25

Reference Information

CVE: CVE-2006-0292, CVE-2006-0293, CVE-2006-0296, CVE-2006-0748, CVE-2006-0749, CVE-2006-0884, CVE-2006-1045, CVE-2006-1727, CVE-2006-1728, CVE-2006-1730, CVE-2006-1731, CVE-2006-1732, CVE-2006-1733, CVE-2006-1734, CVE-2006-1735, CVE-2006-1737, CVE-2006-1738, CVE-2006-1739, CVE-2006-1741, CVE-2006-1742, CVE-2006-1790

MDKSA: 2006:078

CWE: 20, 79, 119, 189, 264, 399