Skip to content
OpenAdvisories
Unscored RHSA-2012:1089 14 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 22, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:10.0.6-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:10.0.6-1.el5_8
Red Hat · RHEL 6 enterprise_linux:6::client thunderbird 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client thunderbird-debuginfo 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server thunderbird 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server thunderbird-debuginfo 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation thunderbird 0:10.0.6-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation thunderbird-debuginfo 0:10.0.6-1.el6_3
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:10.0.6-1.el5_8
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:10.0.6-1.el5_8

Vulnerabilities 14

  • Unscored —
    CVE-2012-1948

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before…

  • Unscored —
    CVE-2012-1951

    Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Fir…

  • Unscored —
    CVE-2012-1952

    The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbir…

  • Unscored —
    CVE-2012-1953

    The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6,…

  • Unscored —
    CVE-2012-1954

    Use-after-free vulnerability in the nsDocument::AdoptNode function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.…

  • Unscored —
    CVE-2012-1955

    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x be…

  • Unscored —
    CVE-2012-1957

    An unspecified parser-utility class in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.…

  • Unscored —
    CVE-2012-1958

    Use-after-free vulnerability in the nsGlobalWindow::PageHidden function in Mozilla Firefox 4.x through 13.0, Firefox ES…

  • Unscored —
    CVE-2012-1959

    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x be…

  • Unscored —
    CVE-2012-1961

    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x be…

  • Unscored —
    CVE-2012-1962

    Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox E…

  • Unscored —
    CVE-2012-1963

    The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Th…

  • Unscored —
    CVE-2012-1964

    The certificate-warning functionality in browser/components/certerror/content/aboutCertError.xhtml in Mozilla Firefox 4…

  • Unscored —
    CVE-2012-1967

    Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x be…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://rhn.redhat.com/errata/RHBA-2012-0337.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=838879
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840205
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840206
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840208
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840211
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840214
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840215
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840220
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=840259
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1089.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-1948
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1948
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1948
  • report
    https://access.redhat.com/security/cve/CVE-2012-1951
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1951
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1951
  • report
    https://access.redhat.com/security/cve/CVE-2012-1952
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1952
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1952
  • report
    https://access.redhat.com/security/cve/CVE-2012-1953
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1953
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1953
  • report
    https://access.redhat.com/security/cve/CVE-2012-1954
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1954
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1954
  • report
    https://access.redhat.com/security/cve/CVE-2012-1955
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1955
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1955
  • report
    https://access.redhat.com/security/cve/CVE-2012-1957
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1957
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1957
  • report
    https://access.redhat.com/security/cve/CVE-2012-1958
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-1958
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-1958