Contact | Site en Français               

 


 

Vulnerabilities & Threats

 
  VUPEN Security Advisories
  Linux Security Advisories

  Malware Advisories

  Security Research
  Threat Watch Blog
  Zero-Day Monitor
  Search Engine
  Mailing List & RSS
 
   

>> Fedora Security Update Fixes Mozilla Thunderbird Multiple Code Execution Vulnerabilities

Title : Fedora Security Update Fixes Mozilla Thunderbird Multiple Code Execution Vulnerabilities
VUPEN ID : VUPEN/ADV-2007-0827
CVE ID : CVE-2006-6497 - CVE-2006-6498 - CVE-2006-6501 - CVE-2006-6502 - CVE-2006-6503 - CVE-2006-6504
Rated as : Critical 
Remotely Exploitable : Yes
Locally Exploitable : Yes
Release Date : 2007-03-06


Technical Description    Receive VUPEN Security alerts in a Text format  Receive VUPEN Security alerts in a PDF format  Receive VUPEN Security alerts in an XML format 

Fedora has released security updates to address multiple vulnerabilities identified in Mozilla Thunderbird. These issues could be exploited by remote attackers to execute arbitrary commands or bypass security restrictions. For additional information, see : VUPEN/ADV-2006-5068

Affected Products

Fedora Core 5
Fedora Core 6

Solution

Upgrade the affected packages :

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/

a5d3474e8609e28fea0f234cd377b05b91f56572 SRPMS/thunderbird-1.5.0.10-1.fc6.src.rpm
a5d3474e8609e28fea0f234cd377b05b91f56572 noarch/thunderbird-1.5.0.10-1.fc6.src.rpm
368d99c609f1feb72bee0c5307f649684aa5be1f ppc/debug/thunderbird-debuginfo-1.5.0.10-1.fc6.ppc.rpm
5fd7fde6d2aacc155b196939c04d39bc57afea68 ppc/thunderbird-1.5.0.10-1.fc6.ppc.rpm
256ecfb4dfb3eaf3918b3af84d4ad316a8aaf703 x86_64/debug/thunderbird-debuginfo-1.5.0.10-1.fc6.x86_64.rpm
4237b9eac76fb78c4b2dde75e601651a2647a723 x86_64/thunderbird-1.5.0.10-1.fc6.x86_64.rpm
06df7df672e9c443d3766c3fd157adc53731e018 i386/thunderbird-1.5.0.10-1.fc6.i386.rpm
0df7960aa7038fa41481815695faade05e3fd7de i386/debug/thunderbird-debuginfo-1.5.0.10-1.fc6.i386.rpm

http://download.fedora.redhat.com/pub/fedora/linux/core/updates/5/

d809e08db21f2b779a90bd6992d5ef3825b26412 SRPMS/thunderbird-1.5.0.10-1.fc5.src.rpm
d809e08db21f2b779a90bd6992d5ef3825b26412 noarch/thunderbird-1.5.0.10-1.fc5.src.rpm
0a00feb2d24a82dd49bf4b1dfe5e0d1202ee8ddf ppc/debug/thunderbird-debuginfo-1.5.0.10-1.fc5.ppc.rpm
28ce412ba70fc55b555a982086510072b7e6df9f ppc/thunderbird-1.5.0.10-1.fc5.ppc.rpm
949b1b76613412a69c7399d9b87d27f27452c02f x86_64/debug/thunderbird-debuginfo-1.5.0.10-1.fc5.x86_64.rpm
0e5974d584c39feba37411efd381769003b7077e x86_64/thunderbird-1.5.0.10-1.fc5.x86_64.rpm
a6b070afb524e57283df6a6dbacefe023ae251bc i386/thunderbird-1.5.0.10-1.fc5.i386.rpm
23831d82f05947ba8f1d8bd3ce7f27c6fb05b8de i386/debug/thunderbird-debuginfo-1.5.0.10-1.fc5.i386.rpm

References

http://www.vupen.com/english/advisories/2007/0827
https://www.redhat.com/archives/fedora-package-announce/2007-March/msg00013.html
https://www.redhat.com/archives/fedora-package-announce/2007-March/msg00012.html

ChangeLog

2007-03-06 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.

 

Vulnerability Alerting

Free 14-Day Trial

 
  Latest News

 

  >> 2009-07-06

     

  Microsoft Windows 0-Day
  Flaw Exploited in the Wild


  >> 2009-06-10

     

  VUPEN Security Research
  Discovered Critical Flaws
  in Adobe Acrobat and MS

  Office Word


  >> 2009-06-02

     

  VUPEN Security Research
  Discovered Critical Flaws
  in ACDSee Products


  >> 2009-05-22

     

  VUPEN Discovered Two
  Critical Vulnerabilities in
  Novell GroupWise 8 / 7

 

 

More Informations    
    








Copyright 2003-2009 © VUPEN.COM - Privacy Policy