Debian DSA-781-1: Mozilla Thunderbird Remote Code Execution Issues

CAN-2005-0989

Remote attackers could read portions of heap memory into a
Javascript string via the lambda replace method.

CAN-2005-1159

The Javascript interpreter could be tricked to continue execution
at the wrong memory address, which may allow attackers to cause a
denial of service (application crash) and possibly execute
arbitrary code.

CAN-2005-1160

Remote attackers could override certain properties or methods of
DOM nodes and gain privileges.

CAN-2005-1532

Remote attackers could override certain properties or methods due
to missing proper limitation of Javascript eval and Script objects
and gain privileges.

CAN-2005-2261

XML scripts ran even when Javascript disabled.

CAN-2005-2265

Missing input sanitising of InstallVersion.compareTo() can cause
the application to crash.

CAN-2005-2266

Remote attackers could steal sensitive information such as cookies
and passwords from web sites by accessing data in a...