Skip to content
OpenAdvisories
Unscored RHSA-2009:1125 9 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird 0:1.5.0.12-23.el4
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird-debuginfo 0:1.5.0.12-23.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird 0:1.5.0.12-23.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird-debuginfo 0:1.5.0.12-23.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird 0:1.5.0.12-23.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird-debuginfo 0:1.5.0.12-23.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird 0:1.5.0.12-23.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird-debuginfo 0:1.5.0.12-23.el4

Vulnerabilities 9

  • Unscored —
    CVE-2009-1303

    The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows rem…

  • Unscored —
    CVE-2009-1305

    The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows …

  • Unscored —
    CVE-2009-1306

    The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Dis…

  • Unscored —
    CVE-2009-1307

    The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly imple…

  • Unscored —
    CVE-2009-1309

    Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHt…

  • Unscored —
    CVE-2009-1392

    The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows …

  • Unscored —
    CVE-2009-1833

    The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows…

  • Unscored —
    CVE-2009-1838

    The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey befo…

  • Unscored —
    CVE-2009-2210

    Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (ap…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496253
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496256
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496262
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496263
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496267
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503568
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503570
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503580
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1125.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-1303
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1303
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1303
  • report
    https://access.redhat.com/security/cve/CVE-2009-1305
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1305
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1305
  • report
    https://access.redhat.com/security/cve/CVE-2009-1306
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1306
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1306
  • report
    https://access.redhat.com/security/cve/CVE-2009-1307
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1307
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1307
  • report
    https://access.redhat.com/security/cve/CVE-2009-1309
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1309
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1309
  • report
    https://access.redhat.com/security/cve/CVE-2009-1392
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1392
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1392
  • report
    https://access.redhat.com/security/cve/CVE-2009-1833
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1833
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1833
  • report
    https://access.redhat.com/security/cve/CVE-2009-1838
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1838
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1838
  • report
    https://access.redhat.com/security/cve/CVE-2009-2210
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=507812
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2210
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2210