Detections
Analytics
Mozilla Thunderbird 10.0.x < 10.0.8 Multiple Vulnerabilities
critical Nessus Plugin ID 62581
Language:
Synopsis
The remote Windows host contains a mail client that is affected by multiple vulnerabilities.Description
The installed version of Thunderbird 10.0.x is affected by the following vulnerabilities :- Several memory safety bugs exist in the browser engine used in Mozilla-based products that could be exploited to execute arbitrary code. (CVE-2012-3983)
- Some methods of a feature used for testing (DOMWindowUtils) are not properly protected and may be called through script by web pages. (CVE-2012-3986)
- A potentially exploitable denial of service may be caused by a combination of invoking full-screen mode and navigating backwards in history. (CVE-2012-3988)
- When the 'GetProperty' function is invoked through JSAP, security checking can by bypassed when getting cross- origin properties, potentially allowing arbitrary code execution. (CVE-2012-3991)
- The 'location' property can be accessed by binary plugins through 'top.location' and 'top' can be shadowed by 'Object.defineProperty', potentially allowing cross- site scripting attacks through plugins. (CVE-2012-3994)
- The Chrome Object Wrapper (COW) has flaws that could allow access to privileged functions, allowing for cross- site scripting attacks or arbitrary code execution. (CVE-2012-3993, CVE-2012-4184)
- The 'location.hash' property is vulnerable to an attack that could allow an attacker to inject script or intercept post data. (CVE-2012-3992)
- The 'Address Sanitizer' tool is affected by multiple, potentially exploitable use-after-free flaws. (CVE-2012-3990, CVE-2012-3995, CVE-2012-4179, CVE-2012-4180, CVE-2012-4181, CVE-2012-4182, CVE-2012-4183)
- The 'Address Sanitizer' tool is affected by multiple, potentially exploitable heap memory corruption issues. (CVE-2012-4185, CVE-2012-4186, CVE-2012-4187, CVE-2012-4188)
Solution
Upgrade to Mozilla Thunderbird 10.0.8 or later.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2012-87/
https://www.mozilla.org/en-US/security/advisories/mfsa2012-86/
https://www.mozilla.org/en-US/security/advisories/mfsa2012-85/
https://www.mozilla.org/en-US/security/advisories/mfsa2012-84/
https://www.mozilla.org/en-US/security/advisories/mfsa2012-83/
https://www.mozilla.org/en-US/security/advisories/mfsa2012-82/
https://www.mozilla.org/en-US/security/advisories/mfsa2012-81/
https://www.mozilla.org/en-US/security/advisories/mfsa2012-79/
https://www.mozilla.org/en-US/security/advisories/mfsa2012-77/
https://www.mozilla.org/en-US/security/advisories/mfsa2012-74/
Plugin Details
Severity: Critical
ID: 62581
File Name: mozilla_thunderbird_1008.nasl
Version: 1.17
Type: local
Agent: windows
Family: Windows
Published: 10/17/2012
Updated: 12/4/2019
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2012-4188
Vulnerability Information
CPE: cpe:/a:mozilla:thunderbird
Required KB Items: Mozilla/Thunderbird/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/9/2012
Vulnerability Publication Date: 10/9/2012
Exploitable With
Metasploit (Firefox 5.0 - 15.0.1 __exposedProps__ XCS Code Execution)
Reference Information
CVE: CVE-2012-3982, CVE-2012-3983, CVE-2012-3986, CVE-2012-3988, CVE-2012-3990, CVE-2012-3991, CVE-2012-3992, CVE-2012-3993, CVE-2012-3994, CVE-2012-3995, CVE-2012-4179, CVE-2012-4180, CVE-2012-4181, CVE-2012-4182, CVE-2012-4183, CVE-2012-4184, CVE-2012-4185, CVE-2012-4186, CVE-2012-4187, CVE-2012-4188
BID: 55922, 55924, 55930, 55931, 56118, 56119, 56120, 56121, 56123, 56125, 56126, 56127, 56128, 56129, 56130, 56131, 56135, 56136, 56140, 56145