Skip to content
OpenAdvisories
Unscored RHSA-2007:0723 6 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird-debuginfo 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird-debuginfo 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird-debuginfo 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird 0:1.5.0.12-0.3.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird-debuginfo 0:1.5.0.12-0.3.el4
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:1.5.0.12-3.el5
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:1.5.0.12-3.el5

Vulnerabilities 6

  • Unscored —
    CVE-2007-3089

    Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or…

  • Unscored —
    CVE-2007-3734

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0…

  • Unscored —
    CVE-2007-3735

    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before …

  • Unscored —
    CVE-2007-3736

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-3737

    Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an e…

  • Unscored —
    CVE-2007-3738

    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=248518
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0723.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-3089
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618309
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3089
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3089
  • report
    https://access.redhat.com/security/cve/CVE-2007-3734
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618318
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3734
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3734
  • report
    https://access.redhat.com/security/cve/CVE-2007-3735
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618319
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3735
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3735
  • report
    https://access.redhat.com/security/cve/CVE-2007-3736
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618320
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3736
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3736
  • report
    https://access.redhat.com/security/cve/CVE-2007-3737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618321
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3737
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3737
  • report
    https://access.redhat.com/security/cve/CVE-2007-3738
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618322
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3738
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3738