Skip to content
OpenAdvisories
Unscored RHSA-2012:0516 12 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 29, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:10.0.4-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:10.0.4-1.el5_8
Red Hat · RHEL 6 enterprise_linux:6::client thunderbird 0:10.0.4-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::client thunderbird-debuginfo 0:10.0.4-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server thunderbird 0:10.0.4-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::server thunderbird-debuginfo 0:10.0.4-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation thunderbird 0:10.0.4-1.el6_2
Red Hat · RHEL 6 enterprise_linux:6::workstation thunderbird-debuginfo 0:10.0.4-1.el6_2
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:10.0.4-1.el5_8
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:10.0.4-1.el5_8

Vulnerabilities 12

  • Unscored —
    CVE-2011-3062

    Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a den…

  • Unscored —
    CVE-2012-0467

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before…

  • Unscored —
    CVE-2012-0468

    The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows r…

  • Unscored —
    CVE-2012-0469

    Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Fi…

  • Unscored —
    CVE-2012-0470 EPSS 10%

    Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.…

  • Unscored —
    CVE-2012-0471

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbi…

  • Unscored —
    CVE-2012-0472

    The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 th…

  • Unscored —
    CVE-2012-0473

    The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thu…

  • Unscored —
    CVE-2012-0474

    Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ES…

  • Unscored —
    CVE-2012-0477

    Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4…

  • Unscored —
    CVE-2012-0478

    The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.…

  • Unscored —
    CVE-2012-0479

    Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x be…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815000
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815019
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815021
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815022
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815023
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815024
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815026
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815037
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815042
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=815044
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0516.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-3062
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-3062
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-3062
  • report
    https://access.redhat.com/security/cve/CVE-2012-0467
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0467
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0467
  • report
    https://access.redhat.com/security/cve/CVE-2012-0468
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0468
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0468
  • report
    https://access.redhat.com/security/cve/CVE-2012-0469
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0469
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0469
  • report
    https://access.redhat.com/security/cve/CVE-2012-0470
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0470
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0470
  • report
    https://access.redhat.com/security/cve/CVE-2012-0471
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0471
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0471
  • report
    https://access.redhat.com/security/cve/CVE-2012-0472
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0472
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0472
  • report
    https://access.redhat.com/security/cve/CVE-2012-0473
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0473
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-0473
  • report
    https://access.redhat.com/security/cve/CVE-2012-0474
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-0474