[RHSA-2017:2885] thunderbird security update

Severity Important
Affected Packages 4
CVEs 7

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 52.4.0.

Security Fix(es):

  • Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2017-7810, CVE-2017-7793, CVE-2017-7818, CVE-2017-7819, CVE-2017-7824, CVE-2017-7814, CVE-2017-7823)

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Jan de Mooij, Jason Kratzer, Randell Jesup, Tom Ritter, Tyson Smith, Sebastian Hengst, Abhishek Arya, Nils, Omair, Andre Weissflog, François Marier, and Jun Kokatsu as the original reporters.

Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/redhat/thunderbird?arch=x86_64&distro=redhat-6.9 redhat thunderbird < 52.4.0-2.el6_9 redhat-6.9 x86_64
Affected pkg:rpm/redhat/thunderbird?arch=s390x&distro=redhat-6.9 redhat thunderbird < 52.4.0-2.el6_9 redhat-6.9 s390x
Affected pkg:rpm/redhat/thunderbird?arch=ppc64&distro=redhat-6.9 redhat thunderbird < 52.4.0-2.el6_9 redhat-6.9 ppc64
Affected pkg:rpm/redhat/thunderbird?arch=i686&distro=redhat-6.9 redhat thunderbird < 52.4.0-2.el6_9 redhat-6.9 i686
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...