[PCWorks] Mozilla Thunderbird Multiple Vulnerabilities

  • From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
  • Date: Thu, 22 Jul 2010 05:33:56 -0500

TITLE:
Mozilla Thunderbird Multiple Vulnerabilities

Criticality level:  Highly critical
Impact:  Security Bypass, Cross Site Scripting, Exposure of 
sensitive information, System access
Where:  From remote

VERIFY ADVISORY:
Secunia.com
http://secunia.com/advisories/40642/

DESCRIPTION:
Some weaknesses and vulnerabilities have been reported in 
Mozilla Thunderbird, which can be exploited by malicious people 
to disclose potentially sensitive information, potentially 
conduct cross-site scripting attacks, bypass certain security 
restrictions, and compromise a user's system.

SOLUTION:
Update to Thunderbird 3.0.6 and 3.1.1.

ORIGINAL ADVISORY:
http://www.mozilla.org/security/announce/2010/mfsa2010-34.html
http://www.mozilla.org/security/announce/2010/mfsa2010-38.html
http://www.mozilla.org/security/announce/2010/mfsa2010-39.html
http://www.mozilla.org/security/announce/2010/mfsa2010-40.html
http://www.mozilla.org/security/announce/2010/mfsa2010-41.html
http://www.mozilla.org/security/announce/2010/mfsa2010-42.html
http://www.mozilla.org/security/announce/2010/mfsa2010-43.html
http://www.mozilla.org/security/announce/2010/mfsa2010-44.html
http://www.mozilla.org/security/announce/2010/mfsa2010-46.html
http://www.mozilla.org/security/announce/2010/mfsa2010-47.html


=========================
The list's FAQ's can be seen by sending an email to 
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.

To unsubscribe, subscribe, set Digest or Vacation to on or off, go to 
//www.freelists.org/list/pcworks .  You can also send an email to 
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line.  Your 
member list settings can be found at 
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks .  Once logged in, you have 
access to numerous other email options.  

The list archives are located at //www.freelists.org/archives/pcworks/ .  
All email posted to the list will be placed there in the event anyone needs to 
look for previous posts.
-zxdjhu-

Other related posts: