Skip to content
OpenAdvisories
Unscored RHSA-2012:1483 15 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:10.0.11-1.el5_8
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:10.0.11-1.el5_8
Red Hat · RHEL 6 enterprise_linux:6::client thunderbird 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::client thunderbird-debuginfo 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server thunderbird 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::server thunderbird-debuginfo 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation thunderbird 0:10.0.11-1.el6_3
Red Hat · RHEL 6 enterprise_linux:6::workstation thunderbird-debuginfo 0:10.0.11-1.el6_3
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:10.0.11-1.el5_8
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:10.0.11-1.el5_8

Vulnerabilities 15

  • Unscored —
    CVE-2012-4201

    The evalInSandbox implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17…

  • Unscored —
    CVE-2012-4202 EPSS 11%

    Heap-based buffer overflow in the image::RasterImage::DrawFrameTo function in Mozilla Firefox before 17.0, Firefox ESR …

  • Unscored —
    CVE-2012-4207

    The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbir…

  • Unscored —
    CVE-2012-4209

    Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0…

  • Unscored —
    CVE-2012-4214

    Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox E…

  • Unscored —
    CVE-2012-4215

    Use-after-free vulnerability in the nsPlaintextEditor::FireClipboardEvent function in Mozilla Firefox before 17.0, Fire…

  • Unscored —
    CVE-2012-4216

    Use-after-free vulnerability in the gfxFont::GetFontEntry function in Mozilla Firefox before 17.0, Firefox ESR 10.x bef…

  • Unscored —
    CVE-2012-5829

    Heap-based buffer overflow in the nsWindow::OnExposeEvent function in Mozilla Firefox before 17.0, Firefox ESR 10.x bef…

  • Unscored —
    CVE-2012-5830

    Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, …

  • Unscored —
    CVE-2012-5833

    The texImage2D implementation in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, T…

  • Unscored —
    CVE-2012-5835

    Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird be…

  • Unscored —
    CVE-2012-5839

    Heap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsClusterStart function in Mozilla Firefox before 17.…

  • Unscored —
    CVE-2012-5840

    Use-after-free vulnerability in the nsTextEditorState::PrepareEditor function in Mozilla Firefox before 17.0, Firefox E…

  • Unscored —
    CVE-2012-5841

    Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0…

  • Unscored —
    CVE-2012-5842

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877614
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877615
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877616
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877628
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877629
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877632
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877634
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=877635
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1483.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-4201
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4201
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4201
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-93.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-4202
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4202
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4202
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-92.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-4207
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4207
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4207
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-101.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-4209
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4209
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4209
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-103.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-4214
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4214
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4214
  • article
    http://www.mozilla.org/security/announce/2012/mfsa2012-105.html
  • report
    https://access.redhat.com/security/cve/CVE-2012-4215
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4215
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4215
  • report
    https://access.redhat.com/security/cve/CVE-2012-4216
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-4216
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-4216
  • report
    https://access.redhat.com/security/cve/CVE-2012-5829
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-5829
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-5829