Detections
Analytics
Mozilla Thunderbird < 3.0.5 Multiple Vulnerabilities
high Log Correlation Engine Plugin ID 801275
Synopsis
The remote host has an email client that is vulnerable to multiple attack vectors.Description
Versions of Thunderbird earlier than 3.0.5 are potentially affected by multiple vulnerabilities :- A re-use of a freed object due to scope confusion. (MFSA 2010-25)
- Multiple crashes can result in arbitrary code execution. (MFSA 2010-26)
- A heap buffer overflow in nsGenericDOMDataNode::SetTextInternal. (MFSA 2010-29)
An integer overflow in XSLT node sorting. (MFSA 2010-30)
Solution
Upgrade to Mozilla Thunderbird 3.0.5 or later.See Also
http://.mozilla.org/security/known-vulnerabilities/thunderbird30.html#thunderbird3.0.5
http://.mozilla.org/security/announce/2010/mfsa2010-25.html
http://.mozilla.org/security/announce/2010/mfsa2010-26.html
Plugin Details
Severity: High
ID: 801275
Family: SMTP Clients
Published: 6/23/2010
Nessus ID: 47125
Vulnerability Information
Patch Publication Date: 6/22/2010
Vulnerability Publication Date: 6/22/2010
Reference Information
CVE: CVE-2010-1121, CVE-2010-1196, CVE-2010-1199, CVE-2010-1200, CVE-2010-1201, CVE-2010-1202, CVE-2010-1203