Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Ubuntu 12.10: USN-1681-2 Moderate: Thunderbird Multiple Issues

ubuntu
Calendar Grey January 9, 2013
Scroller Ubuntu
Ubuntu Security Notice USN-1681-2 resolves vulnerabilities found in Thunderbird as of January 9, 2013, enhancing user security and system integrity
Several security issues were fixed in Thunderbird.

Summary

Several security issues were fixed in Thunderbird.

Software Description:

- thunderbird: Mozilla Open Source mail and newsgroup client

Details:

USN-1681-1 fixed vulnerabilities in Firefox. This update provides the

corresponding updates for Thunderbird.

Original advisory details:

Christoph Diehl, Christian Holler, Mats Palmgren, Chiaki Ishikawa, Bill

Gianopoulos, Benoit Jacob, Gary Kwong, Robert O'Callahan, Jesse Ruderman,

and Julian Seward discovered multiple memory safety issues affecting

Firefox. If the user were tricked into opening a specially crafted page, an

attacker could possibly exploit these to cause a denial of service via

application crash, or potentially execute code with the privileges of the

user invoking Firefox. (CVE-2013-0769, CVE-2013-0749, CVE-2013-0770)

Abhishek Arya discovered several user-after-free and buffer overflows in

Firefox. An attacker could exploit these to cause a denial of service via

application crash, or pote...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu application crash security issues thunderbird memory safety

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  thunderbird                     17.0.2+build1-0ubuntu0.12.10.1

Ubuntu 12.04 LTS:
  thunderbird                     17.0.2+build1-0ubuntu0.12.04.1

Ubuntu 11.10:
  thunderbird                     17.0.2+build1-0ubuntu0.11.10.1

Ubuntu 10.04 LTS:
  thunderbird                     17.0.2+build1-0ubuntu0.10.04.1

After a standard system update you need to restart Thunderbird to make all
the necessary changes.

References

https://ubuntu.com/security/notices/USN-1681-2

https://ubuntu.com/security/notices/USN-1681-1

CVE-2012-5829, CVE-2013-0743, CVE-2013-0744, CVE-2013-0745,

CVE-2013-0746, CVE-2013-0747, CVE-2013-0748, CVE-2013-0749,

CVE-2013-0750, CVE-2013-0752, CVE-2013-0753, CVE-2013-0754,

CVE-2013-0755, CVE-2013-0756, CVE-2013-0757, CVE-2013-0758,

CVE-2013-0759, CVE-2013-0760, CVE-2013-0761, CVE-2013-0762,

CVE-2013-0763, CVE-2013-0764, CVE-2013-0766, CVE-2013-0767,

CVE-2013-0768, CVE-2013-0769, CVE-2013-0770, CVE-2013-0771,

https://bugs.launchpad.net/ubuntu/+source/thunderbird/+bug/1096456

Severity
important
Lowest
Low
Medium
High
Critical

=========================================================================Ubuntu Security Notice USN-1681-2

Topics%20covered

Topics Covered

security advisory denial of service Ubuntu application crash security issues thunderbird memory safety

Package Information

https://launchpad.net/ubuntu/+source/thunderbird/17.0.2+build1-0ubuntu0.12.10.1
https://launchpad.net/ubuntu/+source/thunderbird/17.0.2+build1-0ubuntu0.12.04.1
https://launchpad.net/ubuntu/+source/thunderbird/17.0.2+build1-0ubuntu0.11.10.1
https://launchpad.net/ubuntu/+source/thunderbird/17.0.2+build1-0ubuntu0.10.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.