Skip to content
OpenAdvisories
Unscored RHSA-2015:1852 12 CVEs

Red Hat Security Advisory: thunderbird security update

Published Sep 15, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird 0:38.3.0-1.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client thunderbird-debuginfo 0:38.3.0-1.el5_11
Red Hat · RHEL 6 enterprise_linux:6::client thunderbird 0:38.3.0-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::client thunderbird-debuginfo 0:38.3.0-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server thunderbird 0:38.3.0-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::server thunderbird-debuginfo 0:38.3.0-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation thunderbird 0:38.3.0-1.el6_7
Red Hat · RHEL 6 enterprise_linux:6::workstation thunderbird-debuginfo 0:38.3.0-1.el6_7
Red Hat · RHEL 7 enterprise_linux:7::client thunderbird 0:38.3.0-1.el7_1
Red Hat · RHEL 7 enterprise_linux:7::client thunderbird-debuginfo 0:38.3.0-1.el7_1
Red Hat · RHEL 7 enterprise_linux:7::server thunderbird 0:38.3.0-1.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::server thunderbird-debuginfo 0:38.3.0-1.ael7b_1
Red Hat · RHEL 7 enterprise_linux:7::workstation thunderbird 0:38.3.0-1.el7_1
Red Hat · RHEL 7 enterprise_linux:7::workstation thunderbird-debuginfo 0:38.3.0-1.el7_1
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird 0:38.3.0-1.el5_11
Red Hat · Rhel Productivity 5 rhel_productivity:5 thunderbird-debuginfo 0:38.3.0-1.el5_11

Vulnerabilities 12

  • Unscored —
    CVE-2015-4500

    Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 3…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4509

    Use-after-free vulnerability in the HTMLVideoElement interface in Mozilla Firefox before 41.0 and Firefox ESR 38.x befo…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4517

    NetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4519

    Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow user-assisted remote attackers to bypass intended ac…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4520

    Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow remote attackers to bypass CORS preflight protection…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4521

    The ConvertDialogOptions function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote at…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-4522

    The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7174

    The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow re…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7175

    The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow re…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7176

    The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument…

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7177

    The InitTextures function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers …

    thunderbird firefox Ubuntu
  • Unscored —
    CVE-2015-7180

    The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 misinterpre…

    thunderbird firefox Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/#thunderbird38.3
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265186
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265192
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265778
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265781
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265784
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1852.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-4500
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4500
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4500
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-96/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4509
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4509
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4509
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-106/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4517
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4517
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4517
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-112/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4519
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4519
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4519
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-110/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4520
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4520
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4520
  • article
    https://www.mozilla.org/en-US/security/advisories/mfsa2015-111/
  • report
    https://access.redhat.com/security/cve/CVE-2015-4521
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4521
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4521
  • report
    https://access.redhat.com/security/cve/CVE-2015-4522
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-4522
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-4522
  • report
    https://access.redhat.com/security/cve/CVE-2015-7174
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7174
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-7174
  • report
    https://access.redhat.com/security/cve/CVE-2015-7175
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-7175