1. Home
  2. Security Advisories
  3. Fedora
  4. FEDORA-2009-2884

[FEDORA-2009-2884] Fedora 9: thunderbird

Severity High
Affected Packages 1
CVEs 8
Info Packages References Vulnerabilities

Several flaws were found in the processing of malformed HTML mail content. An
HTML mail message containing malicious content could cause Thunderbird to crash
or, potentially, execute arbitrary code as the user running Thunderbird.
(CVE-2009-0040, CVE-2009-0352, CVE-2009-0353, CVE-2009-0772, CVE-2009-0774,
CVE-2009-0775) Several flaws were found in the way malformed content was
processed. An HTML mail message containing specially-crafted content could
potentially trick a Thunderbird user into surrendering sensitive information.
(CVE-2009-0355, CVE-2009-0776) Note: JavaScript support is disabled by
default in Thunderbird. None of the above issues are exploitable unless
JavaScript is enabled.

Package Affected Version
pkg:rpm/fedora/thunderbird?distro=fedora-9 < 2.0.0.21.1.fc9
ID
FEDORA-2009-2884
Severity
high
Severity from
CVE-2009-0352
URL
https://bodhi.fedoraproject.org/updates/FEDORA-2009-2884
Published
2009-03-21T01:29:45
(15 years ago)
Modified
2009-03-21T01:29:45
(15 years ago)
Rights
Copyright 2009 Red Hat, Inc.
Other Advisories
Source # ID Name URL
Bugzilla 488290 Bug #488290 - CVE-2009-0776 Firefox XML data theft via RDFXMLDataSource and cross-domain redirect https://bugzilla.redhat.com/show_bug.cgi?id=488290
Bugzilla 488273 Bug #488273 - CVE-2009-0772 Firefox 2 and 3 - Layout engine crashes https://bugzilla.redhat.com/show_bug.cgi?id=488273
Bugzilla 486355 Bug #486355 - CVE-2009-0040 libpng arbitrary free() flaw https://bugzilla.redhat.com/show_bug.cgi?id=486355
Bugzilla 483141 Bug #483141 - CVE-2009-0353 Firefox javascript crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=483141
Bugzilla 483139 Bug #483139 - CVE-2009-0352 Firefox layout crashes with evidence of memory corruption https://bugzilla.redhat.com/show_bug.cgi?id=483139
Bugzilla 483143 Bug #483143 - CVE-2009-0355 Firefox local file stealing with SessionStore https://bugzilla.redhat.com/show_bug.cgi?id=483143
Bugzilla 488287 Bug #488287 - CVE-2009-0775 Firefox XUL Linked Clones Double Free Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=488287
Bugzilla 488283 Bug #488283 - CVE-2009-0774 Firefox 2 and 3 crashes in the JavaScript engine https://bugzilla.redhat.com/show_bug.cgi?id=488283
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/fedora/thunderbird?distro=fedora-9 fedora thunderbird < 2.0.0.21.1.fc9 fedora-9
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date