Skip to content
OpenAdvisories
Unscored RHSA-2008:0616 13 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird 0:1.5.0.12-14.el4
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird-debuginfo 0:1.5.0.12-14.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird 0:1.5.0.12-14.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird-debuginfo 0:1.5.0.12-14.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird 0:1.5.0.12-14.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird-debuginfo 0:1.5.0.12-14.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird 0:1.5.0.12-14.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird-debuginfo 0:1.5.0.12-14.el4
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:2.0.0.16-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:2.0.0.16-1.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:2.0.0.16-1.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:2.0.0.16-1.el5

Vulnerabilities 13

  • Unscored —
    CVE-2008-2785

    Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an i…

  • Unscored —
    CVE-2008-2798 EPSS 14%

    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonke…

  • Unscored —
    CVE-2008-2799

    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonke…

  • Unscored —
    CVE-2008-2800

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and…

  • Unscored —
    CVE-2008-2801

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote …

  • Unscored —
    CVE-2008-2802

    Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers t…

  • Unscored —
    CVE-2008-2803

    The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and…

  • Unscored —
    CVE-2008-2805

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary loc…

  • Unscored —
    CVE-2008-2807

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an a…

  • Unscored —
    CVE-2008-2808

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory li…

  • Unscored —
    CVE-2008-2809

    Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netsca…

  • Unscored —
    CVE-2008-2810

    Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly identify the context of Windows shortcut fi…

  • Unscored —
    CVE-2008-2811

    The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey bef…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452204
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452597
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452598
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452599
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452600
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452602
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452604
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452605
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452709
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452710
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452711
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=453007
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0616.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-2785
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2785
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2785
  • report
    https://access.redhat.com/security/cve/CVE-2008-2798
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2798
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2798
  • report
    https://access.redhat.com/security/cve/CVE-2008-2799
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2799
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2799
  • report
    https://access.redhat.com/security/cve/CVE-2008-2800
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2800
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2800
  • report
    https://access.redhat.com/security/cve/CVE-2008-2801
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2801
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2801
  • report
    https://access.redhat.com/security/cve/CVE-2008-2802
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2802
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2802
  • report
    https://access.redhat.com/security/cve/CVE-2008-2803
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2803
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2803
  • report
    https://access.redhat.com/security/cve/CVE-2008-2805
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2805
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2805