The remote Redhat Enterprise Linux 5 / 6 / 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2015:2519 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Several flaws were found in the processing of malformed web content. A web     page containing malicious content could cause Thunderbird to crash or,     potentially, execute arbitrary code with the privileges of the user running     Thunderbird. (CVE-2015-4513, CVE-2015-7189, CVE-2015-7197, CVE-2015-7198,     CVE-2015-7199, CVE-2015-7200)

    A same-origin policy bypass flaw was found in the way Thunderbird handled     certain cross-origin resource sharing (CORS) requests. A web page     containing malicious content could cause Thunderbird to disclose sensitive     information. (CVE-2015-7193)

    Note: All of the above issues cannot be exploited by a specially crafted     HTML mail message because JavaScript is disabled by default for mail     messages. However, they could be exploited in other ways in Thunderbird     (for example, by viewing the full remote content of an RSS feed).

    Red Hat would like to thank the Mozilla project for reporting this issue.
    Upstream acknowledges Christian Holler, David Major, Jesse Ruderman, Tyson     Smith, Boris Zbarsky, Randell Jesup, Olli Pettay, Karl Tomlinson, Jeff     Walden, Gary Kwong, Looben Yang, Shinto K Anto, Ronald Crane, and Ehsan     Akhgari as the original reporters of these issues.

    For technical details regarding these flaws, refer to the Mozilla security     advisories for Thunderbird 38.4.0. You can find a link to the Mozilla     advisories in the References section of this erratum.

    All Thunderbird users should upgrade to this updated package, which     contains Thunderbird version 38.4.0, which corrects these issues. After     installing the update, Thunderbird must be restarted for the changes to     take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 / 6 / 7 : thunderbird (RHSA-2015:2519)

critical Nessus Plugin ID 87100

Version 2.20

Version 2.19

Version 2.20 Nov 5, 2024, 12:50 PM CVSS metrics ("CVSSv3 score" set to 9.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411051250
Version 2.19 Apr 28, 2024, 1:01 AM CVSS metrics ("CVSSv3 score" set to 8.8) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 score source (set to "CVE-2015-7200") CVSSv3 score source (set to "CVE-2015-7199") Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404280101