Test ID:	1.3.6.1.4.1.25623.1.0.805527
Category:	General
Title:	Mozilla Thunderbird Multiple Vulnerabilities-01 Apr15 (Mac OS X)
Summary:	This host is installed with Mozilla; Thunderbird and is prone to multiple vulnerabilities.
Description:	Summary: This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - Improper restriction of resource: URLs. - Multiple unspecified errors. - An error in 'navigator.sendBeacon' implementation. - An error allowing to bypass the Same Origin Policy. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary JavaScript code, conduct cross-site request forgery (CSRF) attacks, conduct denial of service (memory corruption and application crash) attack and possibly execute arbitrary code. Affected Software/OS: Mozilla Thunderbird before version 31.6 on Mac OS X Solution: Upgrade to Mozilla Thunderbird version 31.6 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0816 BugTraq ID: 73461 http://www.securityfocus.com/bid/73461 Debian Security Information: DSA-3211 (Google Search) http://www.debian.org/security/2015/dsa-3211 Debian Security Information: DSA-3212 (Google Search) http://www.debian.org/security/2015/dsa-3212 https://www.exploit-db.com/exploits/37958/ https://security.gentoo.org/glsa/201512-10 RedHat Security Advisories: RHSA-2015:0766 http://rhn.redhat.com/errata/RHSA-2015-0766.html RedHat Security Advisories: RHSA-2015:0771 http://rhn.redhat.com/errata/RHSA-2015-0771.html http://www.securitytracker.com/id/1031996 http://www.securitytracker.com/id/1032000 SuSE Security Announcement: SUSE-SU-2015:0704 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00006.html SuSE Security Announcement: openSUSE-SU-2015:0677 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.html SuSE Security Announcement: openSUSE-SU-2015:0892 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00012.html SuSE Security Announcement: openSUSE-SU-2015:1266 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html http://www.ubuntu.com/usn/USN-2550-1 http://www.ubuntu.com/usn/USN-2552-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-0815 BugTraq ID: 73466 http://www.securityfocus.com/bid/73466 Common Vulnerability Exposure (CVE) ID: CVE-2015-0807 BugTraq ID: 73457 http://www.securityfocus.com/bid/73457 Common Vulnerability Exposure (CVE) ID: CVE-2015-0801 BugTraq ID: 73455 http://www.securityfocus.com/bid/73455
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.