[ GLSA 200605-09 ] Mozilla Thunderbird: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Mozilla Thunderbird: Multiple vulnerabilities (GLSA 200605-09)
Severity: normal
Exploitable: remote
Date: May 08, 2006
Bug(s): #130888
ID: 200605-09

Synopsis


Several vulnerabilities in Mozilla Thunderbird allow attacks ranging from
script execution with elevated privileges to information leaks.


Background


Mozilla Thunderbird is the next-generation mail client from the
Mozilla project.


Affected Packages

Package: mail-client/mozilla-thunderbird
Vulnerable: < 1.0.8
Unaffected: >= 1.0.8
Architectures: All supported architectures

Package: mail-client/mozilla-thunderbird-bin
Vulnerable: < 1.0.8
Unaffected: >= 1.0.8
Architectures: All supported architectures


Description


Several vulnerabilities were found and fixed in Mozilla
Thunderbird.


Impact


A remote attacker could craft malicious emails that would leverage
these issues to inject and execute arbitrary script code with elevated
privileges, steal local files or other information from emails, and
spoof content. Some of these vulnerabilities might even be exploited to
execute arbitrary code with the rights of the user running Thunderbird.


Workaround


There are no known workarounds for all the issues at this time.


Resolution


All Mozilla Thunderbird users should upgrade to the latest
version: