Skip to content
OpenAdvisories
Unscored RHSA-2011:0887 13 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird 0:1.5.0.12-39.el4
Red Hat · RHEL 4 enterprise_linux:4::as thunderbird-debuginfo 0:1.5.0.12-39.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird 0:1.5.0.12-39.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop thunderbird-debuginfo 0:1.5.0.12-39.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird 0:1.5.0.12-39.el4
Red Hat · RHEL 4 enterprise_linux:4::es thunderbird-debuginfo 0:1.5.0.12-39.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird 0:1.5.0.12-39.el4
Red Hat · RHEL 4 enterprise_linux:4::ws thunderbird-debuginfo 0:1.5.0.12-39.el4
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:2.0.0.24-18.el5_6
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:2.0.0.24-18.el5_6
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:2.0.0.24-18.el5_6
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:2.0.0.24-18.el5_6

Vulnerabilities 13

  • Unscored —
    CVE-2011-0083

    Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists i…

  • Unscored —
    CVE-2011-0085

    Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird befor…

  • Unscored —
    CVE-2011-2362

    Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cooki…

  • Unscored —
    CVE-2011-2363

    Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists i…

  • Unscored —
    CVE-2011-2364

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 al…

  • Unscored —
    CVE-2011-2365

    Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.18 and Thunderbird before 3.1.11 al…

  • Unscored —
    CVE-2011-2371 Public exploit EPSS 76%

    Integer overflow in the Array.reduceRight method in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird be…

  • Unscored —
    CVE-2011-2373

    Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and Sea…

  • Unscored —
    CVE-2011-2374

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and …

  • Unscored —
    CVE-2011-2375

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 5.0 and Thunderbird through 3.1.11…

  • Unscored —
    CVE-2011-2376

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.18 and Thunderbird before 3.1.…

  • Unscored —
    CVE-2011-2377

    Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remo…

  • Unscored —
    CVE-2011-2605

    CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=714576
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=714577
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=714580
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=714581
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=714583
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=714929
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0887.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-0083
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0083
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0083
  • report
    https://access.redhat.com/security/cve/CVE-2011-0085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0085
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0085
  • report
    https://access.redhat.com/security/cve/CVE-2011-2362
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2362
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2362
  • report
    https://access.redhat.com/security/cve/CVE-2011-2363
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2363
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2363
  • report
    https://access.redhat.com/security/cve/CVE-2011-2364
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2364
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2364
  • report
    https://access.redhat.com/security/cve/CVE-2011-2365
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2365
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2365
  • report
    https://access.redhat.com/security/cve/CVE-2011-2371
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2371
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2371
  • report
    https://access.redhat.com/security/cve/CVE-2011-2373
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2373
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2373
  • report
    https://access.redhat.com/security/cve/CVE-2011-2374
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2374
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2374
  • report
    https://access.redhat.com/security/cve/CVE-2011-2375
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-2375
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-2375
  • report
    https://access.redhat.com/security/cve/CVE-2011-2376