Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Thunderbird could be made to crash or run programs as your login.
Software Description:
- thunderbird: Mozilla Open Source mail and newsgroup client
Details:
USN-1758-1 fixed vulnerabilities in Firefox. This update provides the
corresponding update for Thunderbird.
Original advisory details:
It was discovered that Firefox contained a memory safety issue. If a user
were tricked into opening a specially crafted page with the HTML editor, a
remote attacker could exploit this to execute arbitrary code with the
privileges of the user invoking the program.
The problem can be corrected by updating your system to the following package versions: Ubuntu 12.10: thunderbird 17.0.4+build1-0ubuntu0.12.10.1 Ubuntu 12.04 LTS: thunderbird 17.0.4+build1-0ubuntu0.12.04.1 Ubuntu 11.10: thunderbird 17.0.4+build1-0ubuntu0.11.10.1 Ubuntu 10.04 LTS: thunderbird 17.0.4+build1-0ubuntu0.10.04.1 After a standard system update you need to restart Thunderbird to make all the necessary changes.
https://ubuntu.com/security/notices/USN-1758-2
https://ubuntu.com/security/notices/USN-1758-1
CVE-2013-0787
Get the latest Linux and open source security news straight to your inbox.