Skip to content
OpenAdvisories
Unscored RHSA-2008:0908 12 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird 0:1.5.0.12-16.el4
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird-debuginfo 0:1.5.0.12-16.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird 0:1.5.0.12-16.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird-debuginfo 0:1.5.0.12-16.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird 0:1.5.0.12-16.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird-debuginfo 0:1.5.0.12-16.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird 0:1.5.0.12-16.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird-debuginfo 0:1.5.0.12-16.el4
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:2.0.0.17-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:2.0.0.17-1.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:2.0.0.17-1.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:2.0.0.17-1.el5

Vulnerabilities 12

  • Unscored —
    CVE-2008-0016 Public exploit EPSS 44%

    Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1…

  • Unscored —
    CVE-2008-3835

    The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaM…

  • Unscored —
    CVE-2008-4058

    The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMo…

  • Unscored —
    CVE-2008-4059

    The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and e…

    firefox Wolfi
  • Unscored —
    CVE-2008-4060

    Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow re…

  • Unscored —
    CVE-2008-4061

    Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.…

  • Unscored —
    CVE-2008-4062

    Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.…

  • Unscored —
    CVE-2008-4065

    Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow re…

  • Unscored —
    CVE-2008-4066

    Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (X…

  • Unscored —
    CVE-2008-4067

    Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17,…

  • Unscored —
    CVE-2008-4068

    Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17,…

  • Unscored —
    CVE-2008-4070

    Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers t…

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463181
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463182
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463190
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463192
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463198
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463199
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463234
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463246
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463248
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=464041
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0908.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-0016
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0016
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0016
  • report
    https://access.redhat.com/security/cve/CVE-2008-3835
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3835
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3835
  • report
    https://access.redhat.com/security/cve/CVE-2008-4058
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4058
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4058
  • report
    https://access.redhat.com/security/cve/CVE-2008-4059
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4059
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4059
  • report
    https://access.redhat.com/security/cve/CVE-2008-4060
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4060
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4060
  • report
    https://access.redhat.com/security/cve/CVE-2008-4061
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4061
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4061
  • report
    https://access.redhat.com/security/cve/CVE-2008-4062
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4062
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4062
  • report
    https://access.redhat.com/security/cve/CVE-2008-4065
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4065
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4065
  • report
    https://access.redhat.com/security/cve/CVE-2008-4066