Skip to content
OpenAdvisories
Unscored RHSA-2010:0153 19 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jan 14, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:2.0.0.24-2.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:2.0.0.24-2.el5_4
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:2.0.0.24-2.el5_4
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:2.0.0.24-2.el5_4

Vulnerabilities 19

  • Unscored —
    CVE-2009-0689 Public exploit EPSS 29%

    Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementatio…

    mono nspr Debian
  • Unscored —
    CVE-2009-1571

    Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderb…

  • Unscored —
    CVE-2009-2462

    The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2009-2463

    Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.…

    nspr Debian
  • Unscored —
    CVE-2009-2466

    The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of ser…

  • Unscored —
    CVE-2009-2470

    Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service …

  • Unscored —
    CVE-2009-3072

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.3, Thu…

  • Unscored —
    CVE-2009-3075

    Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14 and 3.5.x before 3.5.2, …

  • Unscored —
    CVE-2009-3076 Public exploit

    Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1) pkcs11.addmodule and …

  • Unscored —
    CVE-2009-3077

    Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the columns (aka TreeColum…

  • Unscored —
    CVE-2009-3274

    Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux …

  • Unscored —
    CVE-2009-3376

    Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-lef…

  • Unscored —
    CVE-2009-3380

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.…

  • Unscored —
    CVE-2009-3384

    Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to exec…

  • Unscored —
    CVE-2009-3979

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, Sea…

  • Unscored —
    CVE-2010-0159

    The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonk…

  • Unscored —
    CVE-2010-0163

    Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs …

  • Unscored —
    CVE-2010-0169

    The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5…

  • Unscored —
    CVE-2010-0171

    Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonke…

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512128
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512131
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512136
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=512145
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521688
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521691
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521692
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521693
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=524815
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530162
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530168
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530567
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=546694
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=566047
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=566050
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0153.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-0689
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=539784
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-0689
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-0689
  • report
    https://access.redhat.com/security/cve/CVE-2009-1571
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1571
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1571
  • report
    https://access.redhat.com/security/cve/CVE-2009-2462
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2462
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2462
  • report
    https://access.redhat.com/security/cve/CVE-2009-2463
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2463
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2463
  • report
    https://access.redhat.com/security/cve/CVE-2009-2466
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2466
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2466
  • report
    https://access.redhat.com/security/cve/CVE-2009-2470
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2470
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2470
  • report
    https://access.redhat.com/security/cve/CVE-2009-3072
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3072
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3072