Skip to content
OpenAdvisories
Unscored RHSA-2013:1823 9 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:24.2.0-2.el5_10
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:24.2.0-2.el5_10
Red Hat · RHEL 6 enterprise_linux:6::client thunderbird 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::client thunderbird-debuginfo 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server thunderbird 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::server thunderbird-debuginfo 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation thunderbird 0:24.2.0-1.el6_5
Red Hat · RHEL 6 enterprise_linux:6::workstation thunderbird-debuginfo 0:24.2.0-1.el6_5
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:24.2.0-2.el5_10
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:24.2.0-2.el5_10

Vulnerabilities 9

  • Unscored —
    CVE-2013-0772

    The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2…

  • Unscored —
    CVE-2013-5609

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2…

  • Unscored —
    CVE-2013-5612

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for r…

  • Unscored —
    CVE-2013-5613

    Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox …

  • Unscored —
    CVE-2013-5614

    Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME eleme…

  • Unscored —
    CVE-2013-5616

    Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0,…

  • Unscored —
    CVE-2013-5618 EPSS 10%

    Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor…

  • Unscored —
    CVE-2013-6671 EPSS 11%

    The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird bef…

  • Unscored —
    CVE-2013-6674 Public exploit

    Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    http://www.mozilla.org/security/known-vulnerabilities/thunderbirdESR.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039417
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039420
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039421
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039423
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039426
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1039429
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1823.json
  • report
    https://access.redhat.com/security/cve/CVE-2013-0772
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=911840
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-0772
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-0772
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-22.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5609
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5609
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5609
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-104.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5612
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5612
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5612
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-106.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5613
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5613
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5613
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-114.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5614
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5614
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5614
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-107.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5616
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5616
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5616
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-108.html
  • report
    https://access.redhat.com/security/cve/CVE-2013-5618
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2013-5618
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2013-5618
  • article
    http://www.mozilla.org/security/announce/2013/mfsa2013-109.html