Mozilla Thunderbird 3.1.x < 3.1.10 Multiple Vulnerabilities

high Log Correlation Engine Plugin ID 801271

Synopsis

The remote host has a web browser installed that is vulnerable to multiple attack vectors.

Description

Versions of Thunderbird 3.1.x earlier than 3.1.10 are potentially affected by multiple vulnerabilities :

- Multiple memory corruption issues could lead to arbitrary code execution. (MFSA2011-12)

- The 'resource:' protocol could be exploited to allow directory traversal on Windows and the potential loading of resources from non-permitted locations. (MFSA2011-16)

Solution

Upgrade to Thunderbird 3.1.10 or later.

Plugin Details

Severity: High

ID: 801271

Family: SMTP Clients

Published: 4/29/2011

Nessus ID: 53596

Vulnerability Information

Patch Publication Date: 4/28/2011

Vulnerability Publication Date: 4/28/2011

Reference Information

CVE: CVE-2011-0069, CVE-2011-0070, CVE-2011-0071, CVE-2011-0072, CVE-2011-0074, CVE-2011-0075, CVE-2011-0077, CVE-2011-0078, CVE-2011-0079, CVE-2011-0080, CVE-2011-0081

BID: 47635, 47641, 47646, 47647, 47648, 47651, 47653, 47654, 57655, 47656, 47657, 47666

Detections

Analytics