Synopsis
The remote Windows host contains a mail client that is affected by multiple vulnerabilities.
Description
The installed version of Thunderbird is earlier than 3.0.4. Such versions are potentially affected by the following security issues :
- Multiple crashes can result in arbitrary code execution.
(MFSA 2010-16)
- A select event handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)
- An error exists in the way '<option>' elements are inserted into an XUL tree '<optgroup>' (MFSA 2010-18)
- Session renegotiations are not handled properly, which can be exploited to insert arbitrary plaintext by a man-in-the-middle. (MFSA 2010-22)
- XML documents fail to call certain security checks when loading new content. (MFSA 2010-24)
Solution
Upgrade to Thunderbird 3.0.4 or later.