FrSIRT - Fedora Security Update Fixes Mozilla Thunderbird Multiple Code Execution Vulnerabilities / Exploit (Security Advisories)

French Security Incident Response Team

French

English

Fedora Security Update Fixes Mozilla Thunderbird Multiple Code Execution Vulnerabilities

Title : Fedora Security Update Fixes Mozilla Thunderbird Multiple Code Execution Vulnerabilities
Advisory ID : FrSIRT/ADV-2007-0827
CVE ID : CVE-2006-6497 - CVE-2006-6498 - CVE-2006-6501 - CVE-2006-6502 - CVE-2006-6503 - CVE-2006-6504
Rated as : Critical

Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2007-03-06

Advisory Details

Description

Affected Products

Solution

References

Technical Description

Fedora has released security updates to address multiple vulnerabilities identified in Mozilla Thunderbird [...]

Solution

Upgrade the affected packages :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

a5d3474e8609e28fea0f234cd377b05b91f56572 SRPMS/thunderbird-1.5.0.10-1.fc6.src.rpm
a5d3474e8609e28fea0f234cd377b05b91f56572 noarch/thunderbird-1.5.0.10-1.fc6.src.rpm
368d99c609f1feb72bee0c5307f649684aa5be1f ppc/debug/thunderbird-debuginfo-1.5.0.10-1.fc6.ppc.rpm
5fd7fde6d2aacc155b196939c04d39bc57afea68 ppc/thunderbird-1.5.0.10-1.fc6.ppc.rpm
256ecfb4dfb3eaf3918b3af84d4ad316a8aaf703 x86_64/debug/thunderbird-debuginfo-1.5.0.10-1.fc6.x86_64.rpm
4237b9eac76fb78c4b2dde75e601651a2647a723 x86_64/thunderbird-1.5.0.10-1.fc6.x86_64.rpm
06df7df672e9c443d3766c3fd157adc53731e018 i386/thunderbird-1.5.0.10-1.fc6.i386.rpm
0df7960aa7038fa41481815695faade05e3fd7de i386/debug/thunderbird-debuginfo-1.5.0.10-1.fc6.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/

d809e08db21f2b779a90bd6992d5ef3825b26412 SRPMS/thunderbird-1.5.0.10-1.fc5.src.rpm
d809e08db21f2b779a90bd6992d5ef3825b26412 noarch/thunderbird-1.5.0.10-1.fc5.src.rpm
0a00feb2d24a82dd49bf4b1dfe5e0d1202ee8ddf ppc/debug/thunderbird-debuginfo-1.5.0.10-1.fc5.ppc.rpm
28ce412ba70fc55b555a982086510072b7e6df9f ppc/thunderbird-1.5.0.10-1.fc5.ppc.rpm
949b1b76613412a69c7399d9b87d27f27452c02f x86_64/debug/thunderbird-debuginfo-1.5.0.10-1.fc5.x86_64.rpm
0e5974d584c39feba37411efd381769003b7077e x86_64/thunderbird-1.5.0.10-1.fc5.x86_64.rpm
a6b070afb524e57283df6a6dbacefe023ae251bc i386/thunderbird-1.5.0.10-1.fc5.i386.rpm
23831d82f05947ba8f1d8bd3ce7f27c6fb05b8de i386/debug/thunderbird-debuginfo-1.5.0.10-1.fc5.i386.rpm

ChangeLog

2007-03-06 : Initial release

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.

Mailinglist

	IBM AIX Multiple Command Local Privilege Escalation Vulnerabilities
	IBM AIX Sendmail Header Lines Denial of Service Vulnerability
	IBM Metrica Multiple Parameter Cross Site Scripting Vulnerabilities
	IBM Lotus Quickr Unspecified Cross Site Scripting Vulnerabilities
	IBM Hardware Management Console Denial of Service Vulnerability
	IBM Tivoli Storage Manager Client Buffer Overflow Vulnerability
	IBM DB2 Denial of Service and Information Disclosure Vulnerabilities

	Microsoft XML Core Services Multiple Remote Vulnerabilities (MS08-069)
	Microsoft Windows SMB Credential Reflection Vulnerability (MS08-068)
	Microsoft Windows Server Service Vulnerability (MS08-067)
	Microsoft Windows "afd.sys" Privilege Escalation Vulnerability (MS08-066)
	Microsoft Windows MSMQ Code Execution Vulnerability (MS08-065)
	Microsoft Windows VADs Privilege Escalation Vulnerability (MS08-064)
	Microsoft Windows SMB Code Execution Vulnerability (MS08-063)

	Apple iPhone and iPod touch Multiple Code Execution Vulnerabilities
	Apple Safari Code Execution and Security Bypass Vulnerabilities
	Apple iLife and Aperture Image Handling Code Execution Vulnerabilities
	Apple Mac OS X Code Execution and Security Bypass Vulnerabilities
	Apple TV Multiple File Processing Code Execution Vulnerabilities
	Apple Mac OS X Code Execution and Security Bypass Vulnerabilities
	Apple iPhone Code Execution and Security Bypass Vulnerabilities