Skip to content
OpenAdvisories
Unscored RHSA-2008:0976 9 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird 0:1.5.0.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird-debuginfo 0:1.5.0.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird 0:1.5.0.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird-debuginfo 0:1.5.0.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird 0:1.5.0.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird-debuginfo 0:1.5.0.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird 0:1.5.0.12-17.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird-debuginfo 0:1.5.0.12-17.el4
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:2.0.0.18-1.el5
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:2.0.0.18-1.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:2.0.0.18-1.el5
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:2.0.0.18-1.el5

Vulnerabilities 9

  • Unscored —
    CVE-2008-5012

    Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly c…

  • Unscored —
    CVE-2008-5014

    jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMo…

  • Unscored —
    CVE-2008-5016

    The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13…

  • Unscored —
    CVE-2008-5017

    Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before…

  • Unscored —
    CVE-2008-5018

    The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18…

  • Unscored —
    CVE-2008-5021

    nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey…

  • Unscored —
    CVE-2008-5022

    The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird…

  • Unscored —
    CVE-2008-5024

    Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x befor…

  • Unscored —
    CVE-2008-5052

    The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x befo…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470864
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470873
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470881
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470883
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470884
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470894
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470895
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470902
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0976.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-5012
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5012
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5012
  • report
    https://access.redhat.com/security/cve/CVE-2008-5014
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5014
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5014
  • report
    https://access.redhat.com/security/cve/CVE-2008-5016
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5016
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5016
  • report
    https://access.redhat.com/security/cve/CVE-2008-5017
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5017
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5017
  • report
    https://access.redhat.com/security/cve/CVE-2008-5018
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5018
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5018
  • report
    https://access.redhat.com/security/cve/CVE-2008-5021
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5021
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5021
  • report
    https://access.redhat.com/security/cve/CVE-2008-5022
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5022
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5022
  • report
    https://access.redhat.com/security/cve/CVE-2008-5024
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5024
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5024
  • report
    https://access.redhat.com/security/cve/CVE-2008-5052
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618336
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-5052
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-5052