Test ID:	1.3.6.1.4.1.25623.1.1.18.2.2024.2073.1
Category:	openSUSE Local Security Checks
Title:	openSUSE Security Advisory (SUSE-SU-2024:2073-1)
Summary:	The remote host is missing an update for the 'MozillaThunderbird' package(s) announced via the SUSE-SU-2024:2073-1 advisory.
Description:	Summary: The remote host is missing an update for the 'MozillaThunderbird' package(s) announced via the SUSE-SU-2024:2073-1 advisory. Vulnerability Insight: This update for MozillaThunderbird fixes the following issues: - Update to version 115.12.0 ESR (bsc#1226027) - CVE-2024-5702: Use-after-free in networking - CVE-2024-5688: Use-after-free in JavaScript object transplant - CVE-2024-5690: External protocol handlers leaked by timing attack - CVE-2024-5691: Sandboxed iframes were able to bypass sandbox restrictions to open a new window - CVE-2024-5692: Bypass of file name restrictions during saving - CVE-2024-5693: Cross-Origin Image leak via Offscreen Canvas - CVE-2024-5696: Memory Corruption in Text Fragments - CVE-2024-5700: Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 Affected Software/OS: 'MozillaThunderbird' package(s) on openSUSE Leap 15.5, openSUSE Leap 15.6. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-5688 https://bugzilla.mozilla.org/show_bug.cgi?id=1895086 https://lists.debian.org/debian-lts-announce/2024/06/msg00000.html https://www.mozilla.org/security/advisories/mfsa2024-25/ https://www.mozilla.org/security/advisories/mfsa2024-26/ https://www.mozilla.org/security/advisories/mfsa2024-28/ https://lists.debian.org/debian-lts-announce/2024/06/msg00010.html Common Vulnerability Exposure (CVE) ID: CVE-2024-5690 https://bugzilla.mozilla.org/show_bug.cgi?id=1883693 Common Vulnerability Exposure (CVE) ID: CVE-2024-5691 https://bugzilla.mozilla.org/show_bug.cgi?id=1888695 Common Vulnerability Exposure (CVE) ID: CVE-2024-5692 https://bugzilla.mozilla.org/show_bug.cgi?id=1891234 Common Vulnerability Exposure (CVE) ID: CVE-2024-5693 https://bugzilla.mozilla.org/show_bug.cgi?id=1891319 Common Vulnerability Exposure (CVE) ID: CVE-2024-5696 https://bugzilla.mozilla.org/show_bug.cgi?id=1896555 Common Vulnerability Exposure (CVE) ID: CVE-2024-5700 Memory safety bugs fixed in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1862809%2C1889355%2C1893388%2C1895123 Common Vulnerability Exposure (CVE) ID: CVE-2024-5702 https://bugzilla.mozilla.org/show_bug.cgi?id=1193389 https://www.mozilla.org/security/advisories/mfsa2024-18/
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.