From Red Hat Security Advisory 2007:0981 :

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the way in which Thunderbird processed certain malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or potentially execute arbitrary code as the user running Thunderbird. JavaScript support is disabled by default in Thunderbird; these issues are not exploitable unless the user has enabled JavaScript. (CVE-2007-5338, CVE-2007-5339, CVE-2007-5340)

Several flaws were found in the way in which Thunderbird displayed malformed HTML mail content. An HTML mail message containing specially crafted content could potentially trick a user into surrendering sensitive information. (CVE-2007-1095, CVE-2007-3844, CVE-2007-3511, CVE-2007-5334)

A flaw was found in the Thunderbird sftp protocol handler. A malicious HTML mail message could access data from a remote sftp site, possibly stealing sensitive user data. (CVE-2007-5337)

A request-splitting flaw was found in the way in which Thunderbird generates a digest authentication request. If a user opened a specially crafted URL, it was possible to perform cross-site scripting attacks, web cache poisoning, or other, similar exploits.
(CVE-2007-2292)

Users of Thunderbird are advised to upgrade to these erratum packages, which contain backported patches that correct these issues.

Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user's privileges. (CVE-2007-5336, CVE-2007-5339, CVE-2007-5340)

Michal Zalewski discovered that the onUnload event handlers were incorrectly able to access information outside the old page content. A malicious website could exploit this to modify the contents, or steal confidential data (such as passwords), of the next loaded web page.
(CVE-2007-1095)

Stefano Di Paola discovered that Firefox did not correctly request Digest Authentications. A malicious website could exploit this to inject arbitrary HTTP headers or perform session splitting attacks against proxies. (CVE-2007-2292)

Flaws were discovered in the file upload form control. By tricking a user into opening a malicious web page, an attacker could force arbitrary files from the user's computer to be uploaded without their consent. (CVE-2006-2894, CVE-2007-3511)

Eli Friedman discovered that XUL could be used to hide a window's titlebar. A malicious website could exploit this to enhance their attempts at creating phishing websites. (CVE-2007-5334)

Georgi Guninski discovered that Firefox would allow file-system based web pages to access additional files. By tricking a user into opening a malicious web page from a gnome-vfs location, an attacker could steal arbitrary files from the user's computer. (CVE-2007-5337)

It was discovered that the XPCNativeWrappers were not safe in certain situations. By tricking a user into opening a malicious web page, an attacker could run arbitrary JavaScript with the user's privileges.
(CVE-2007-5338).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.8.

This update provides the latest Firefox to correct these issues. As well, it provides Firefox 2.0.0.8 for older products.

Updated thunderbird packages that fix several security bugs are now available for Fedora Core 7.

This update has been rated as having moderate security impact by the Fedora Security Response Team.

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the way in which Thunderbird processed certain malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or potentially execute arbitrary code as the user running Thunderbird. JavaScript support is disabled by default in Thunderbird; these issues are not exploitable unless the user has enabled JavaScript. (CVE-2007-5338, CVE-2007-5339, CVE-2007-5340)

Several flaws were found in the way in which Thunderbird displayed malformed HTML mail content. An HTML mail message containing specially crafted content could potentially trick a user into surrendering sensitive information. (CVE-2007-1095, CVE-2007-3844, CVE-2007-3511, CVE-2007-5334)

A flaw was found in the Thunderbird sftp protocol handler. A malicious HTML mail message could access data from a remote sftp site, possibly stealing sensitive user data. (CVE-2007-5337)

A request-splitting flaw was found in the way in which Thunderbird generates a digest authentication request. If a user opened a specially crafted URL, it was possible to perform cross-site scripting attacks, web cache poisoning, or other, similar exploits.
(CVE-2007-2292)

Users of Thunderbird are advised to upgrade to these erratum packages, which contain backported patches that correct these issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-200711-24 (Mozilla Thunderbird: Multiple vulnerabilities)

    Multiple vulnerabilities have been reported in Mozilla Thunderbird's     HTML browser engine (CVE-2007-5339) and JavaScript engine     (CVE-2007-5340) that can be exploited to cause a memory corruption.
  Impact :

    A remote attacker could entice a user to read a specially crafted email     that could trigger one of the vulnerabilities, possibly leading to the     execution of arbitrary code.
  Workaround :

    There is no known workaround at this time for all of these issues, but     some of them can be avoided by disabling JavaScript.

The remote version of Mozilla Thunderbird suffers from various security issues, several of which may lead to execution of arbitrary code on the affected host subject to the user's privileges.

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor.

Several flaws were found in the way in which SeaMonkey processed certain malformed web content. A web page containing malicious content could cause SeaMonkey to crash or potentially execute arbitrary code as the user running SeaMonkey. (CVE-2007-5338, CVE-2007-5339, CVE-2007-5340)

Several flaws were found in the way in which SeaMonkey displayed malformed web content. A web page containing specially crafted content could potentially trick a user into surrendering sensitive information. (CVE-2007-1095, CVE-2007-3844, CVE-2007-3511, CVE-2007-5334)

A flaw was found in the SeaMonkey sftp protocol handler. A malicious web page could access data from a remote sftp site, possibly stealing sensitive user data. (CVE-2007-5337)

A request-splitting flaw was found in the way in which SeaMonkey generates a digest authentication request. If a user opened a specially crafted URL, it was possible to perform cross-site scripting attacks, web cache poisoning, or other, similar exploits.
(CVE-2007-2292)

Users of SeaMonkey are advised to upgrade to these erratum packages, which contain backported patches that correct these issues.

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-1095     Michal Zalewski discovered that the unload event handler     had access to the address of the next page to be loaded,     which could allow information disclosure or spoofing.

  - CVE-2007-2292     Stefano Di Paola discovered that insufficient validation     of user names used in Digest authentication on a website     allows HTTP response splitting attacks.

  - CVE-2007-3511     It was discovered that insecure focus handling of the     file upload control can lead to information disclosure.
    This is a variant of CVE-2006-2894.

  - CVE-2007-5334     Eli Friedman discovered that web pages written in Xul     markup can hide the titlebar of windows, which can lead     to spoofing attacks.

  - CVE-2007-5337     Georgi Guninski discovered the insecure handling of     smb:// and sftp:// URI schemes may lead to information     disclosure. This vulnerability is only exploitable if     Gnome-VFS support is present on the system.

  - CVE-2007-5338     'moz_bug_r_a4' discovered that the protection scheme     offered by XPCNativeWrappers could be bypassed, which     might allow privilege escalation.

  - CVE-2007-5339     L. David Baron, Boris Zbarsky, Georgi Guninski, Paul     Nickerson, Olli Pettay, Jesse Ruderman, Vladimir Sukhoy,     Daniel Veditz, and Martijn Wargers discovered crashes in     the layout engine, which might allow the execution of     arbitrary code.

  - CVE-2007-5340     Igor Bukanov, Eli Friedman, and Jesse Ruderman     discovered crashes in the JavaScript engine, which might     allow the execution of arbitrary code.

The oldstable distribution (sarge) doesn't contain xulrunner.

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-3734     Bernd Mielke, Boris Zbarsky, David Baron, Daniel Veditz,     Jesse Ruderman, Lukas Loehrer, Martijn Wargers, Mats     Palmgren, Olli Pettay, Paul Nickerson and Vladimir     Sukhoy discovered crashes in the layout engine, which     might allow the execution of arbitrary code.

  - CVE-2007-3735     Asaf Romano, Jesse Ruderman and Igor Bukanov discovered     crashes in the JavaScript engine, which might allow the     execution of arbitrary code.

  - CVE-2007-3844     'moz_bug_r_a4' discovered that a regression in the     handling of'about:blank' windows used by addons may lead     to an attacker being able to modify the content of     websites.

  - CVE-2007-3845     Jesper Johansson discovered that missing sanitising of     double-quotes and spaces in URIs passed to external     programs may allow an attacker to pass arbitrary     arguments to the helper program if the user is tricked     into opening a malformed web page.

  - CVE-2007-5339     L. David Baron, Boris Zbarsky, Georgi Guninski, Paul     Nickerson, Olli Pettay, Jesse Ruderman, Vladimir Sukhoy,     Daniel Veditz, and Martijn Wargers discovered crashes in     the layout engine, which might allow the execution of     arbitrary code.

  - CVE-2007-5340     Igor Bukanov, Eli Friedman, and Jesse Ruderman     discovered crashes in the JavaScript engine, which might     allow the execution of arbitrary code. Generally,     enabling JavaScript in Icedove is not recommended.

The Mozilla products in the oldstable distribution (sarge) are no longer supported with security updates.

ID	Name	Product	Family	Published	Updated	Severity
67593	Oracle Linux 4 : thunderbird (ELSA-2007-0981)	Nessus	Oracle Linux Local Security Checks	7/12/2013	1/14/2021	high
28141	Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : firefox vulnerabilities (USN-535-1)	Nessus	Ubuntu Local Security Checks	11/10/2007	1/19/2021	high
36338	Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2007:202)	Nessus	Mandriva Local Security Checks	4/23/2009	1/6/2021	high
28231	Fedora 7 : thunderbird-2.0.0.9-1.fc7 (2007-3431)	Nessus	Fedora Local Security Checks	11/16/2007	1/11/2021	high
28263	GLSA-200711-24 : Mozilla Thunderbird: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	11/20/2007	1/6/2021	medium
29743	Mozilla Thunderbird < 1.5.0.14 Multiple Vulnerabilities	Nessus	Windows	12/20/2007	7/16/2018	high
27541	CentOS 3 / 4 : seamonkey (CESA-2007:0980)	Nessus	CentOS Local Security Checks	10/25/2007	1/4/2021	high
27547	Debian DSA-1392-1 : xulrunner - several vulnerabilities	Nessus	Debian Local Security Checks	10/25/2007	1/4/2021	high
27546	Debian DSA-1391-1 : icedove - several vulnerabilities	Nessus	Debian Local Security Checks	10/25/2007	1/4/2021	high

Detections

Analytics

Plugins Search

high

high

high

high

medium

high

high

high

high