Skip to content
OpenAdvisories
Unscored RHSA-2008:0105 10 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird 0:1.5.0.12-8.el4
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird-debuginfo 0:1.5.0.12-8.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird 0:1.5.0.12-8.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird-debuginfo 0:1.5.0.12-8.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird 0:1.5.0.12-8.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird-debuginfo 0:1.5.0.12-8.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird 0:1.5.0.12-8.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird-debuginfo 0:1.5.0.12-8.el4
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:1.5.0.12-8.el5
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:1.5.0.12-8.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:1.5.0.12-8.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:1.5.0.12-8.el5

Vulnerabilities 10

  • Unscored —
    CVE-2008-0304

    Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attacke…

  • Unscored —
    CVE-2008-0412

    The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows r…

  • Unscored —
    CVE-2008-0413

    The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow…

  • Unscored —
    CVE-2008-0415

    Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to exe…

  • Unscored —
    CVE-2008-0418 Public exploit

    Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before…

  • Unscored —
    CVE-2008-0419

    Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and caus…

  • Unscored —
    CVE-2008-0420

    modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaM…

  • Unscored —
    CVE-2008-0591

    Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirma…

  • Unscored —
    CVE-2008-0592

    Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of s…

  • Unscored —
    CVE-2008-0593

    Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property o…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=435123
  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431732
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431733
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431739
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431748
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431749
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431751
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431752
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431756
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0105.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-0304
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0304
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0304
  • report
    https://access.redhat.com/security/cve/CVE-2008-0412
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0412
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0412
  • report
    https://access.redhat.com/security/cve/CVE-2008-0413
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0413
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0413
  • report
    https://access.redhat.com/security/cve/CVE-2008-0415
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0415
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0415
  • report
    https://access.redhat.com/security/cve/CVE-2008-0418
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0418
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0418
  • report
    https://access.redhat.com/security/cve/CVE-2008-0419
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0419
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0419
  • report
    https://access.redhat.com/security/cve/CVE-2008-0420
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=431750
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0420
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0420
  • report
    https://access.redhat.com/security/cve/CVE-2008-0591
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0591
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0591
  • report
    https://access.redhat.com/security/cve/CVE-2008-0592
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0592
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0592