Test ID:	1.3.6.1.4.1.25623.1.0.60895
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2008:0224
Summary:	NOSUMMARY
Description:	Description: The remote host is missing updates announced in advisory RHSA-2008:0224. Mozilla Thunderbird is a standalone mail and newsgroup client. A flaw was found in the processing of malformed JavaScript content. An HTML mail message containing such malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird. (CVE-2008-1380) Note: JavaScript support is disabled by default in Thunderbird the above issue is not exploitable unless JavaScript is enabled. All Thunderbird users should upgrade to these updated packages, which contain backported patches to resolve these issues. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2008-0224.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : Critical CVSS Score: 9.3
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-1380 1019873 http://www.securitytracker.com/id?1019873 20080508 FLEA-2008-0008-1 firefox http://www.securityfocus.com/archive/1/491838/100/0/threaded 238492 http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1 28818 http://www.securityfocus.com/bid/28818 29787 http://secunia.com/advisories/29787 29793 http://secunia.com/advisories/29793 29828 http://secunia.com/advisories/29828 29860 http://secunia.com/advisories/29860 29883 http://secunia.com/advisories/29883 29908 http://secunia.com/advisories/29908 29911 http://secunia.com/advisories/29911 29912 http://secunia.com/advisories/29912 29947 http://secunia.com/advisories/29947 30012 http://secunia.com/advisories/30012 30029 http://secunia.com/advisories/30029 30192 http://secunia.com/advisories/30192 30327 http://secunia.com/advisories/30327 30620 http://secunia.com/advisories/30620 30717 http://secunia.com/advisories/30717 31023 http://secunia.com/advisories/31023 31377 http://secunia.com/advisories/31377 33434 http://secunia.com/advisories/33434 ADV-2008-1251 http://www.vupen.com/english/advisories/2008/1251/references ADV-2008-1793 http://www.vupen.com/english/advisories/2008/1793/references DSA-1555 http://www.debian.org/security/2008/dsa-1555 DSA-1558 http://www.debian.org/security/2008/dsa-1558 DSA-1562 http://www.debian.org/security/2008/dsa-1562 DSA-1696 http://www.debian.org/security/2009/dsa-1696 FEDORA-2008-3231 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00407.html FEDORA-2008-3264 https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00463.html FEDORA-2008-3519 https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00058.html FEDORA-2008-3557 https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00074.html GLSA-200805-18 http://www.gentoo.org/security/en/glsa/glsa-200805-18.xml GLSA-200808-03 http://security.gentoo.org/glsa/glsa-200808-03.xml MDVSA-2008:110 http://www.mandriva.com/security/advisories?name=MDVSA-2008:110 RHSA-2008:0222 http://www.redhat.com/support/errata/RHSA-2008-0222.html RHSA-2008:0223 http://www.redhat.com/support/errata/RHSA-2008-0223.html RHSA-2008:0224 http://www.redhat.com/support/errata/RHSA-2008-0224.html SSA:2008-108-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.391769 SSA:2008-191-03 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.383152 SUSE-SR:2008:011 http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html SUSE-SR:2008:013 http://www.novell.com/linux/security/advisories/2008_13_sr.html USN-602-1 http://www.ubuntu.com/usn/usn-602-1 VU#441529 http://www.kb.cert.org/vuls/id/441529 http://www.mozilla.org/security/announce/2008/mfsa2008-20.html https://bugzilla.mozilla.org/show_bug.cgi?id=425576 mozilla-garbage-code-execution(41857) https://exchange.xforce.ibmcloud.com/vulnerabilities/41857 oval:org.mitre.oval:def:10752 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10752
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.