Skip to content
OpenAdvisories
Unscored RHSA-2009:1126 11 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:2.0.0.22-2.el5_3
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:2.0.0.22-2.el5_3
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:2.0.0.22-2.el5_3
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:2.0.0.22-2.el5_3

Vulnerabilities 11

  • Unscored —
    CVE-2009-1303

    The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows rem…

  • Unscored —
    CVE-2009-1305

    The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows …

  • Unscored —
    CVE-2009-1306

    The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Dis…

  • Unscored —
    CVE-2009-1307

    The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly imple…

  • Unscored —
    CVE-2009-1308

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote atta…

  • Unscored —
    CVE-2009-1309

    Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHt…

  • Unscored —
    CVE-2009-1392

    The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows …

  • Unscored —
    CVE-2009-1833

    The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows…

  • Unscored —
    CVE-2009-1836

    Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to det…

  • Unscored —
    CVE-2009-1838

    The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey befo…

  • Unscored —
    CVE-2009-2210

    Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (ap…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=456202
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496253
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496256
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496262
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496263
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496266
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496267
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503568
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503570
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503578
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=503580
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1126.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-1303
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1303
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1303
  • report
    https://access.redhat.com/security/cve/CVE-2009-1305
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1305
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1305
  • report
    https://access.redhat.com/security/cve/CVE-2009-1306
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1306
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1306
  • report
    https://access.redhat.com/security/cve/CVE-2009-1307
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1307
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1307
  • report
    https://access.redhat.com/security/cve/CVE-2009-1308
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1308
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1308
  • report
    https://access.redhat.com/security/cve/CVE-2009-1309
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1309
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1309
  • report
    https://access.redhat.com/security/cve/CVE-2009-1392
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1392
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1392
  • report
    https://access.redhat.com/security/cve/CVE-2009-1833
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1833
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1833
  • report
    https://access.redhat.com/security/cve/CVE-2009-1836
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1836