Oval Definition:oval:com.redhat.rhsa:def:20110311
Revision Date:2011-03-02Version:638
Title:RHSA-2011:0311: thunderbird security update (Critical)
Description:Mozilla Thunderbird is a standalone mail and newsgroup client.

  • Several flaws were found in the processing of malformed HTML content. Malicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2010-1585, CVE-2011-0053, CVE-2011-0062)

  • A flaw was found in the way Thunderbird handled malformed JPEG images. An HTML mail message containing a malicious JPEG image could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2011-0061)

    All Thunderbird users should upgrade to this updated package, which resolves these issues. All running instances of Thunderbird must be restarted for the update to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2010-1585
    CVE-2010-1585
    CVE-2011-0053
    CVE-2011-0053
    CVE-2011-0061
    CVE-2011-0061
    CVE-2011-0062
    CVE-2011-0062
    RHSA-2011:0311
    RHSA-2011:0311-01
    RHSA-2011:0311-01
    Platform(s):Red Hat Enterprise Linux 6
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND thunderbird is earlier than 0:3.1.8-4.el6_0
  • AND thunderbird is signed with Red Hat redhatrelease2 key
  • BACK