openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-2734)

High Nessus Plugin ID 27129


The remote openSUSE host is missing a security update.


This update brings Mozilla Thunderbird to version It contains stability fixes and some security fixes :

- MFSA 2007-01: As part of the Thunderbird update releases several bugs were fixed to improve the stability of the browser. Some of these were crashes that showed evidence of memory corruption and we presume that with enough effort at least some of these could be exploited to run arbitrary code. These fixes affected the layout engine (CVE-2007-0775), SVG renderer (CVE-2007-0776) and JavaScript engine (CVE-2007-0777).

- MFSA 2007-06: CVE-2007-0008: SSL clients such as Firefox and Thunderbird can suffer a buffer overflow if a malicious server presents a certificate with a public key that is too small to encrypt the entire 'Master Secret'. Exploiting this overflow appears to be unreliable but possible if the SSLv2 protocol is enabled.


Update the affected MozillaThunderbird packages.

Plugin Details

Severity: High

ID: 27129

File Name: suse_MozillaThunderbird-2734.nasl

Version: $Revision: 1.11 $

Type: local

Agent: unix

Published: 2007/10/17

Modified: 2016/12/22

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:MozillaThunderbird, p-cpe:/a:novell:opensuse:MozillaThunderbird-translations, cpe:/o:novell:opensuse:10.1, cpe:/o:novell:opensuse:10.2

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 2007/03/09

Reference Information

CVE: CVE-2007-0008, CVE-2007-0775, CVE-2007-0776, CVE-2007-0777

CWE: 119, 189