rhsa-2012_0516
Vulnerability from csaf_redhat
Published
2012-04-24 19:42
Modified
2024-12-15 18:21
Summary
Red Hat Security Advisory: thunderbird security update
Notes
Topic
An updated thunderbird package that fixes multiple security issues is now
available for Red Hat Enterprise Linux 5 and 6.
The Red Hat Security Response Team has rated this update as having critical
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
Mozilla Thunderbird is a standalone mail and newsgroup client.
A flaw was found in Sanitiser for OpenType (OTS), used by Thunderbird to
help prevent potential exploits in malformed OpenType fonts. Malicious
content could cause Thunderbird to crash or, under certain conditions,
possibly execute arbitrary code with the privileges of the user running
Thunderbird. (CVE-2011-3062)
Malicious content could cause Thunderbird to crash or, potentially, execute
arbitrary code with the privileges of the user running Thunderbird.
(CVE-2012-0467, CVE-2012-0468, CVE-2012-0469)
Content containing a malicious Scalable Vector Graphics (SVG) image file
could cause Thunderbird to crash or, potentially, execute arbitrary code
with the privileges of the user running Thunderbird. (CVE-2012-0470)
A flaw was found in the way Thunderbird used its embedded Cairo library to
render certain fonts. Malicious content could cause Thunderbird to crash
or, under certain conditions, possibly execute arbitrary code with the
privileges of the user running Thunderbird. (CVE-2012-0472)
A flaw was found in the way Thunderbird rendered certain images using
WebGL. Malicious content could cause Thunderbird to crash or, under certain
conditions, possibly execute arbitrary code with the privileges of the user
running Thunderbird. (CVE-2012-0478)
A cross-site scripting (XSS) flaw was found in the way Thunderbird handled
certain multibyte character sets. Malicious content could cause Thunderbird
to run JavaScript code with the permissions of different content.
(CVE-2012-0471)
A flaw was found in the way Thunderbird rendered certain graphics using
WebGL. Malicious content could cause Thunderbird to crash. (CVE-2012-0473)
A flaw in the built-in feed reader in Thunderbird allowed the Website field
to display the address of different content than the content the user was
visiting. An attacker could use this flaw to conceal a malicious URL,
possibly tricking a user into believing they are viewing a trusted site, or
allowing scripts to be loaded from the attacker's site, possibly leading to
cross-site scripting (XSS) attacks. (CVE-2012-0474)
A flaw was found in the way Thunderbird decoded the ISO-2022-KR and
ISO-2022-CN character sets. Malicious content could cause Thunderbird
to run JavaScript code with the permissions of different content.
(CVE-2012-0477)
A flaw was found in the way the built-in feed reader in Thunderbird handled
RSS and Atom feeds. Invalid RSS or Atom content loaded over HTTPS caused
Thunderbird to display the address of said content, but not the content.
The previous content continued to be displayed. An attacker could use this
flaw to perform phishing attacks, or trick users into thinking they are
visiting the site reported by the Website field, when the page is actually
content controlled by an attacker. (CVE-2012-0479)
Red Hat would like to thank the Mozilla project for reporting these issues.
Upstream acknowledges Mateusz Jurczyk of the Google Security Team as the
original reporter of CVE-2011-3062; Aki Helin from OUSPG as the original
reporter of CVE-2012-0469; Atte Kettunen from OUSPG as the original
reporter of CVE-2012-0470; wushi of team509 via iDefense as the original
reporter of CVE-2012-0472; Ms2ger as the original reporter of
CVE-2012-0478; Anne van Kesteren of Opera Software as the original reporter
of CVE-2012-0471; Matias Juntunen as the original reporter of
CVE-2012-0473; Jordi Chancel and Eddy Bordi, and Chris McGowen as the
original reporters of CVE-2012-0474; Masato Kinugawa as the original
reporter of CVE-2012-0477; and Jeroen van der Gun as the original reporter
of CVE-2012-0479.
Note: All issues except CVE-2012-0470, CVE-2012-0472, and CVE-2011-3062
cannot be exploited by a specially-crafted HTML mail message as JavaScript
is disabled by default for mail messages. It could be exploited another way
in Thunderbird, for example, when viewing the full remote content of an
RSS feed.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An updated thunderbird package that fixes multiple security issues is now\navailable for Red Hat Enterprise Linux 5 and 6.\n\nThe Red Hat Security Response Team has rated this update as having critical\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nA flaw was found in Sanitiser for OpenType (OTS), used by Thunderbird to\nhelp prevent potential exploits in malformed OpenType fonts. Malicious\ncontent could cause Thunderbird to crash or, under certain conditions,\npossibly execute arbitrary code with the privileges of the user running\nThunderbird. (CVE-2011-3062)\n\nMalicious content could cause Thunderbird to crash or, potentially, execute\narbitrary code with the privileges of the user running Thunderbird.\n(CVE-2012-0467, CVE-2012-0468, CVE-2012-0469)\n\nContent containing a malicious Scalable Vector Graphics (SVG) image file\ncould cause Thunderbird to crash or, potentially, execute arbitrary code\nwith the privileges of the user running Thunderbird. (CVE-2012-0470)\n\nA flaw was found in the way Thunderbird used its embedded Cairo library to\nrender certain fonts. Malicious content could cause Thunderbird to crash\nor, under certain conditions, possibly execute arbitrary code with the\nprivileges of the user running Thunderbird. (CVE-2012-0472)\n\nA flaw was found in the way Thunderbird rendered certain images using\nWebGL. Malicious content could cause Thunderbird to crash or, under certain\nconditions, possibly execute arbitrary code with the privileges of the user\nrunning Thunderbird. (CVE-2012-0478)\n\nA cross-site scripting (XSS) flaw was found in the way Thunderbird handled\ncertain multibyte character sets. Malicious content could cause Thunderbird\nto run JavaScript code with the permissions of different content.\n(CVE-2012-0471)\n\nA flaw was found in the way Thunderbird rendered certain graphics using\nWebGL. Malicious content could cause Thunderbird to crash. (CVE-2012-0473)\n\nA flaw in the built-in feed reader in Thunderbird allowed the Website field\nto display the address of different content than the content the user was\nvisiting. An attacker could use this flaw to conceal a malicious URL,\npossibly tricking a user into believing they are viewing a trusted site, or\nallowing scripts to be loaded from the attacker\u0027s site, possibly leading to\ncross-site scripting (XSS) attacks. (CVE-2012-0474)\n\nA flaw was found in the way Thunderbird decoded the ISO-2022-KR and\nISO-2022-CN character sets. Malicious content could cause Thunderbird\nto run JavaScript code with the permissions of different content.\n(CVE-2012-0477)\n\nA flaw was found in the way the built-in feed reader in Thunderbird handled\nRSS and Atom feeds. Invalid RSS or Atom content loaded over HTTPS caused\nThunderbird to display the address of said content, but not the content.\nThe previous content continued to be displayed. An attacker could use this\nflaw to perform phishing attacks, or trick users into thinking they are\nvisiting the site reported by the Website field, when the page is actually\ncontent controlled by an attacker. (CVE-2012-0479)\n\nRed Hat would like to thank the Mozilla project for reporting these issues.\nUpstream acknowledges Mateusz Jurczyk of the Google Security Team as the\noriginal reporter of CVE-2011-3062; Aki Helin from OUSPG as the original\nreporter of CVE-2012-0469; Atte Kettunen from OUSPG as the original\nreporter of CVE-2012-0470; wushi of team509 via iDefense as the original\nreporter of CVE-2012-0472; Ms2ger as the original reporter of\nCVE-2012-0478; Anne van Kesteren of Opera Software as the original reporter\nof CVE-2012-0471; Matias Juntunen as the original reporter of\nCVE-2012-0473; Jordi Chancel and Eddy Bordi, and Chris McGowen as the\noriginal reporters of CVE-2012-0474; Masato Kinugawa as the original\nreporter of CVE-2012-0477; and Jeroen van der Gun as the original reporter\nof CVE-2012-0479.\n\nNote: All issues except CVE-2012-0470, CVE-2012-0472, and CVE-2011-3062\ncannot be exploited by a specially-crafted HTML mail message as JavaScript\nis disabled by default for mail messages. It could be exploited another way\nin Thunderbird, for example, when viewing the full remote content of an\nRSS feed.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2012:0516",
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#critical",
"url": "https://access.redhat.com/security/updates/classification/#critical"
},
{
"category": "external",
"summary": "815000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815000"
},
{
"category": "external",
"summary": "815019",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815019"
},
{
"category": "external",
"summary": "815020",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815020"
},
{
"category": "external",
"summary": "815021",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815021"
},
{
"category": "external",
"summary": "815022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815022"
},
{
"category": "external",
"summary": "815023",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815023"
},
{
"category": "external",
"summary": "815024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815024"
},
{
"category": "external",
"summary": "815026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815026"
},
{
"category": "external",
"summary": "815037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815037"
},
{
"category": "external",
"summary": "815042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815042"
},
{
"category": "external",
"summary": "815044",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815044"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0516.json"
}
],
"title": "Red Hat Security Advisory: thunderbird security update",
"tracking": {
"current_release_date": "2024-12-15T18:21:15+00:00",
"generator": {
"date": "2024-12-15T18:21:15+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.2.3"
}
},
"id": "RHSA-2012:0516",
"initial_release_date": "2012-04-24T19:42:00+00:00",
"revision_history": [
{
"date": "2012-04-24T19:42:00+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2012-04-24T19:44:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-12-15T18:21:15+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "RHEL Optional Productivity Applications (v. 5 server)",
"product": {
"name": "RHEL Optional Productivity Applications (v. 5 server)",
"product_id": "5Server-DPAS-5.8.Z",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_productivity:5"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:5::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.2.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::client"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.2.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product": {
"name": "Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.2.z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:6::workstation"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:10.0.4-1.el5_8.i386",
"product": {
"name": "thunderbird-0:10.0.4-1.el5_8.i386",
"product_id": "thunderbird-0:10.0.4-1.el5_8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@10.0.4-1.el5_8?arch=i386"
}
}
},
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"product": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"product_id": "thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.4-1.el5_8?arch=i386"
}
}
}
],
"category": "architecture",
"name": "i386"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:10.0.4-1.el5_8.src",
"product": {
"name": "thunderbird-0:10.0.4-1.el5_8.src",
"product_id": "thunderbird-0:10.0.4-1.el5_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@10.0.4-1.el5_8?arch=src"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:10.0.4-1.el6_2.src",
"product": {
"name": "thunderbird-0:10.0.4-1.el6_2.src",
"product_id": "thunderbird-0:10.0.4-1.el6_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@10.0.4-1.el6_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-0:10.0.4-1.el5_8.x86_64",
"product": {
"name": "thunderbird-0:10.0.4-1.el5_8.x86_64",
"product_id": "thunderbird-0:10.0.4-1.el5_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@10.0.4-1.el5_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"product_id": "thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.4-1.el5_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"product": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"product_id": "thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.4-1.el6_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:10.0.4-1.el6_2.x86_64",
"product": {
"name": "thunderbird-0:10.0.4-1.el6_2.x86_64",
"product_id": "thunderbird-0:10.0.4-1.el6_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@10.0.4-1.el6_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"product": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"product_id": "thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.4-1.el6_2?arch=i686"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:10.0.4-1.el6_2.i686",
"product": {
"name": "thunderbird-0:10.0.4-1.el6_2.i686",
"product_id": "thunderbird-0:10.0.4-1.el6_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@10.0.4-1.el6_2?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"product": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"product_id": "thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.4-1.el6_2?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:10.0.4-1.el6_2.ppc64",
"product": {
"name": "thunderbird-0:10.0.4-1.el6_2.ppc64",
"product_id": "thunderbird-0:10.0.4-1.el6_2.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@10.0.4-1.el6_2?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"product": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"product_id": "thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird-debuginfo@10.0.4-1.el6_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "thunderbird-0:10.0.4-1.el6_2.s390x",
"product": {
"name": "thunderbird-0:10.0.4-1.el6_2.s390x",
"product_id": "thunderbird-0:10.0.4-1.el6_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/thunderbird@10.0.4-1.el6_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el5_8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386"
},
"product_reference": "thunderbird-0:10.0.4-1.el5_8.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el5_8.src as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src"
},
"product_reference": "thunderbird-0:10.0.4-1.el5_8.src",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el5_8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64"
},
"product_reference": "thunderbird-0:10.0.4-1.el5_8.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el5_8.i386 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 5 client)",
"product_id": "5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"relates_to_product_reference": "5Client-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el5_8.i386 as a component of RHEL Optional Productivity Applications (v. 5 server)",
"product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386"
},
"product_reference": "thunderbird-0:10.0.4-1.el5_8.i386",
"relates_to_product_reference": "5Server-DPAS-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el5_8.src as a component of RHEL Optional Productivity Applications (v. 5 server)",
"product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src"
},
"product_reference": "thunderbird-0:10.0.4-1.el5_8.src",
"relates_to_product_reference": "5Server-DPAS-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el5_8.x86_64 as a component of RHEL Optional Productivity Applications (v. 5 server)",
"product_id": "5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64"
},
"product_reference": "thunderbird-0:10.0.4-1.el5_8.x86_64",
"relates_to_product_reference": "5Server-DPAS-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el5_8.i386 as a component of RHEL Optional Productivity Applications (v. 5 server)",
"product_id": "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"relates_to_product_reference": "5Server-DPAS-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64 as a component of RHEL Optional Productivity Applications (v. 5 server)",
"product_id": "5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"relates_to_product_reference": "5Server-DPAS-5.8.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.i686",
"relates_to_product_reference": "6Client-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.ppc64",
"relates_to_product_reference": "6Client-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.s390x",
"relates_to_product_reference": "6Client-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.src as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.src",
"relates_to_product_reference": "6Client-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.x86_64",
"relates_to_product_reference": "6Client-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"relates_to_product_reference": "6Client-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"relates_to_product_reference": "6Client-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"relates_to_product_reference": "6Client-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)",
"product_id": "6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"relates_to_product_reference": "6Client-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.i686",
"relates_to_product_reference": "6Server-optional-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.ppc64",
"relates_to_product_reference": "6Server-optional-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.s390x",
"relates_to_product_reference": "6Server-optional-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.src",
"relates_to_product_reference": "6Server-optional-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.x86_64",
"relates_to_product_reference": "6Server-optional-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"relates_to_product_reference": "6Server-optional-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"relates_to_product_reference": "6Server-optional-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"relates_to_product_reference": "6Server-optional-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)",
"product_id": "6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"relates_to_product_reference": "6Server-optional-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.i686",
"relates_to_product_reference": "6Workstation-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.ppc64",
"relates_to_product_reference": "6Workstation-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.s390x",
"relates_to_product_reference": "6Workstation-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.src as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.src",
"relates_to_product_reference": "6Workstation-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-0:10.0.4-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64"
},
"product_reference": "thunderbird-0:10.0.4-1.el6_2.x86_64",
"relates_to_product_reference": "6Workstation-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"relates_to_product_reference": "6Workstation-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"relates_to_product_reference": "6Workstation-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"relates_to_product_reference": "6Workstation-6.2.z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)",
"product_id": "6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
},
"product_reference": "thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"relates_to_product_reference": "6Workstation-6.2.z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Mateusz Jurczyk"
],
"organization": "Google Security Team",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2011-3062",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815042"
}
],
"notes": [
{
"category": "description",
"text": "Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted OpenType file.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Off-by-one error in OpenType Sanitizer (MFSA 2012-31)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2011-3062"
},
{
"category": "external",
"summary": "RHBZ#815042",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815042"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2011-3062",
"url": "https://www.cve.org/CVERecord?id=CVE-2011-3062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2011-3062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3062"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Off-by-one error in OpenType Sanitizer (MFSA 2012-31)"
},
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
}
],
"cve": "CVE-2012-0467",
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815000"
}
],
"notes": [
{
"category": "description",
"text": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Miscellaneous memory safety hazards (rv:12.0/ rv:10.0.4) (MFSA 2012-20)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-0467"
},
{
"category": "external",
"summary": "RHBZ#815000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815000"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-0467",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0467"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0467",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0467"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Miscellaneous memory safety hazards (rv:12.0/ rv:10.0.4) (MFSA 2012-20)"
},
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
}
],
"cve": "CVE-2012-0468",
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815000"
}
],
"notes": [
{
"category": "description",
"text": "The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (assertion failure and memory corruption) or possibly execute arbitrary code via vectors related to jsval.h and the js::array_shift function.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Miscellaneous memory safety hazards (rv:12.0/ rv:10.0.4) (MFSA 2012-20)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-0468"
},
{
"category": "external",
"summary": "RHBZ#815000",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815000"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-0468",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0468"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0468",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0468"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Miscellaneous memory safety hazards (rv:12.0/ rv:10.0.4) (MFSA 2012-20)"
},
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Aki Helin"
],
"organization": "OUSPG",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2012-0469",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815019"
}
],
"notes": [
{
"category": "description",
"text": "Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: use-after-free in IDBKeyRange (MFSA 2012-22)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-0469"
},
{
"category": "external",
"summary": "RHBZ#815019",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815019"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-0469",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0469"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: use-after-free in IDBKeyRange (MFSA 2012-22)"
},
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Atte Kettunen"
],
"organization": "OUSPG",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2012-0470",
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815020"
}
],
"notes": [
{
"category": "description",
"text": "Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to cause a denial of service (invalid gfxImageSurface free operation) or possibly execute arbitrary code by leveraging the use of \"different number systems.\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Invalid frees causes heap corruption in gfxImageSurface (MFSA 2012-23)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-0470"
},
{
"category": "external",
"summary": "RHBZ#815020",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815020"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-0470",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0470"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0470",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0470"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Invalid frees causes heap corruption in gfxImageSurface (MFSA 2012-23)"
},
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Anne van Kesteren"
],
"organization": "Opera Software",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2012-0471",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815021"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via a multibyte character set.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Potential XSS via multibyte content processing errors (MFSA 2012-24)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-0471"
},
{
"category": "external",
"summary": "RHBZ#815021",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815021"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-0471",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0471"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0471",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0471"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Potential XSS via multibyte content processing errors (MFSA 2012-24)"
},
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"wushi"
],
"organization": "team509 via iDefense",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2012-0472",
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815022"
}
],
"notes": [
{
"category": "description",
"text": "The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9, when certain Windows Vista and Windows 7 configurations are used, does not properly restrict font-rendering attempts, which allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Potential memory corruption during font rendering using cairo-dwrite (MFSA 2012-25)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-0472"
},
{
"category": "external",
"summary": "RHBZ#815022",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815022"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-0472",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0472"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0472",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0472"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Potential memory corruption during font rendering using cairo-dwrite (MFSA 2012-25)"
},
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Matias Juntunen"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2012-0473",
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815023"
}
],
"notes": [
{
"category": "description",
"text": "The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 calls the FindMaxElementInSubArray function with incorrect template arguments, which allows remote attackers to obtain sensitive information from video memory via a crafted WebGL.drawElements call.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: WebGL.drawElements may read illegal video memory due to FindMaxUshortElement error (MFSA 2012-26)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-0473"
},
{
"category": "external",
"summary": "RHBZ#815023",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815023"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-0473",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0473"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0473",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0473"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: WebGL.drawElements may read illegal video memory due to FindMaxUshortElement error (MFSA 2012-26)"
},
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
}
],
"cve": "CVE-2012-0474",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815024"
}
],
"notes": [
{
"category": "description",
"text": "Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allows remote attackers to inject arbitrary web script or HTML via vectors related to short-circuited page loads, aka \"Universal XSS (UXSS).\"",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Page load short-circuit can lead to XSS (MFSA 2012-27)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-0474"
},
{
"category": "external",
"summary": "RHBZ#815024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-0474",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0474"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0474",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0474"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Page load short-circuit can lead to XSS (MFSA 2012-27)"
},
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Masato Kinugawa"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2012-0477",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815026"
}
],
"notes": [
{
"category": "description",
"text": "Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to inject arbitrary web script or HTML via the (1) ISO-2022-KR or (2) ISO-2022-CN character set.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues (MFSA 2012-29)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-0477"
},
{
"category": "external",
"summary": "RHBZ#815026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815026"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-0477",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0477"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0477",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0477"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues (MFSA 2012-29)"
},
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Ms2ger"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2012-0478",
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815037"
}
],
"notes": [
{
"category": "description",
"text": "The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 does not properly restrict JSVAL_TO_OBJECT casts, which might allow remote attackers to execute arbitrary code via a crafted web page.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Crash with WebGL content using textImage2D (MFSA 2012-30)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-0478"
},
{
"category": "external",
"summary": "RHBZ#815037",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815037"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-0478",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0478"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0478",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0478"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "Mozilla: Crash with WebGL content using textImage2D (MFSA 2012-30)"
},
{
"acknowledgments": [
{
"names": [
"Mozilla project"
]
},
{
"names": [
"Jeroen van der Gun"
],
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2012-0479",
"discovery_date": "2012-04-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "815044"
}
],
"notes": [
{
"category": "description",
"text": "Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaMonkey before 2.9 allow remote attackers to spoof the address bar via an https URL for invalid (1) RSS or (2) Atom XML content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Mozilla: Potential site identity spoofing when loading RSS and Atom feeds (MFSA 2012-33)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2012-0479"
},
{
"category": "external",
"summary": "RHBZ#815044",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=815044"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2012-0479",
"url": "https://www.cve.org/CVERecord?id=CVE-2012-0479"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-0479",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0479"
}
],
"release_date": "2012-04-24T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2012-04-24T19:42:00+00:00",
"details": "All Thunderbird users should upgrade to this updated package, which\ncontains Thunderbird version 10.0.4 ESR, which corrects these issues.\nAfter installing the update, Thunderbird must be restarted for the\nchanges to take effect.\n\nBefore applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258",
"product_ids": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2012:0516"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"products": [
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Client-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Client-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.src",
"5Server-DPAS-5.8.Z:thunderbird-0:10.0.4-1.el5_8.x86_64",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.i386",
"5Server-DPAS-5.8.Z:thunderbird-debuginfo-0:10.0.4-1.el5_8.x86_64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Client-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Client-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Server-optional-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Server-optional-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.src",
"6Workstation-6.2.z:thunderbird-0:10.0.4-1.el6_2.x86_64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.i686",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.ppc64",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.s390x",
"6Workstation-6.2.z:thunderbird-debuginfo-0:10.0.4-1.el6_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Mozilla: Potential site identity spoofing when loading RSS and Atom feeds (MFSA 2012-33)"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.