Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 11.04: USN-1463-6 Critical: Thunderbird DoS Threats

ubuntu
Calendar Grey June 27, 2012
Scroller Ubuntu
Numerous vulnerabilities in Thunderbird highlighted in the Ubuntu security notice USN-1463-6, outlining potential threats and suggested fixes.
Several security issues were fixed in Thunderbird.

Summary

Several security issues were fixed in Thunderbird.

Software Description:

- thunderbird: Mozilla Open Source mail and newsgroup client

Details:

USN-1463-1 fixed vulnerabilities in Firefox. This update provides the

corresponding fixes for Thunderbird.

Original advisory details:

Jesse Ruderman, Igor Bukanov, Bill McCloskey, Christian Holler, Andrew

McCreight, Olli Pettay, Boris Zbarsky, and Brian Bondy discovered memory

safety issues affecting Firefox. If the user were tricked into opening a

specially crafted page, an attacker could possibly exploit these to cause a

denial of service via application crash, or potentially execute code with

the privileges of the user invoking Firefox. (CVE-2012-1937, CVE-2012-1938)

It was discovered that Mozilla's WebGL implementation exposed a bug in

certain NVIDIA graphics drivers. The impact of this issue has not been

disclosed at this time. (CVE-2011-3101)

Adam Barth discovered that certain inline event han...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service information disclosure application crash ubuntu thunderbird

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  thunderbird                     13.0.1+build1-0ubuntu0.11.04.1

After a standard system update you need to restart Thunderbird to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1463-6

https://ubuntu.com/security/notices/USN-1463-1

https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1007556

Severity
critical
Lowest
Low
Medium
High
Critical

June 27, 2012

Topics%20covered

Topics Covered

security advisory denial of service information disclosure application crash ubuntu thunderbird

Package Information

https://launchpad.net/ubuntu/+source/thunderbird/13.0.1+build1-0ubuntu0.11.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.