Skip to content
OpenAdvisories
Unscored RHSA-2007:0078 14 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird 0:1.5.0.10-0.1.el4
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird-debuginfo 0:1.5.0.10-0.1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird 0:1.5.0.10-0.1.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird-debuginfo 0:1.5.0.10-0.1.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird 0:1.5.0.10-0.1.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird-debuginfo 0:1.5.0.10-0.1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird 0:1.5.0.10-0.1.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird-debuginfo 0:1.5.0.10-0.1.el4

Vulnerabilities 14

  • Unscored —
    CVE-2006-6077

    The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.…

  • Unscored —
    CVE-2007-0008

    Integer underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox bef…

  • Unscored —
    CVE-2007-0009 EPSS 51%

    Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by F…

  • Unscored —
    CVE-2007-0775

    Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Th…

  • Unscored —
    CVE-2007-0777

    The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMo…

  • Unscored —
    CVE-2007-0778

    The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can genera…

  • Unscored —
    CVE-2007-0779

    GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 a…

  • Unscored —
    CVE-2007-0780

    browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the request…

  • Unscored —
    CVE-2007-0800

    Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which all…

  • Unscored —
    CVE-2007-0981 Public exploit EPSS 13%

    Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow rem…

  • Unscored —
    CVE-2007-0995

    Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML charac…

  • Unscored —
    CVE-2007-0996

    The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the defa…

  • Unscored —
    CVE-2007-1092

    Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via Ja…

  • Unscored —
    CVE-2007-1282

    Integer overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to trigger a…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=166574
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=204453
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=230542
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0078.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-6077
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618236
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-6077
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-6077
  • report
    https://access.redhat.com/security/cve/CVE-2007-0008
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=565576
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0008
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0008
  • report
    https://access.redhat.com/security/cve/CVE-2007-0009
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0009
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0009
  • report
    https://access.redhat.com/security/cve/CVE-2007-0775
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618273
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0775
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0775
  • report
    https://access.redhat.com/security/cve/CVE-2007-0777
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618275
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0777
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0777
  • report
    https://access.redhat.com/security/cve/CVE-2007-0778
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618276
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0778
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0778
  • report
    https://access.redhat.com/security/cve/CVE-2007-0779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618277
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0779
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0779
  • report
    https://access.redhat.com/security/cve/CVE-2007-0780
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618278
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0780
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0780
  • report
    https://access.redhat.com/security/cve/CVE-2007-0800
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618279
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0800