Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.843338
Category:Ubuntu Local Security Checks
Title:Ubuntu Update for thunderbird USN-3436-1
Summary:The remote host is missing an update for the 'thunderbird'; package(s) announced via the referenced advisory.
Description:Summary:
The remote host is missing an update for the 'thunderbird'
package(s) announced via the referenced advisory.

Vulnerability Insight:
Multiple security issues were discovered in
Thunderbird. If a user were tricked in to opening a specially crafted website in
a browsing-like context, an attacker could potentially exploit these to read
uninitialized memory, bypass phishing and malware protection, conduct cross-site
scripting (XSS) attacks, cause a denial of service via application crash, or
execute arbitrary code. (CVE-2017-7793, CVE-2017-7810, CVE-2017-7814,
CVE-2017-7818, CVE-2017-7819, CVE-2017-7823, CVE-2017-7824) Martin Thomson
discovered that NSS incorrectly generated handshake hashes. A remote attacker
could potentially exploit this to cause a denial of service via application
crash, or execute arbitrary code. (CVE-2017-7805)

Affected Software/OS:
thunderbird on Ubuntu 17.04,
Ubuntu 16.04 LTS,
Ubuntu 14.04 LTS

Solution:
Please Install the Updated Packages.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2017-7793
BugTraq ID: 101055
http://www.securityfocus.com/bid/101055
Debian Security Information: DSA-3987 (Google Search)
https://www.debian.org/security/2017/dsa-3987
Debian Security Information: DSA-4014 (Google Search)
https://www.debian.org/security/2017/dsa-4014
https://security.gentoo.org/glsa/201803-14
https://lists.debian.org/debian-lts-announce/2017/11/msg00000.html
RedHat Security Advisories: RHSA-2017:2831
https://access.redhat.com/errata/RHSA-2017:2831
RedHat Security Advisories: RHSA-2017:2885
https://access.redhat.com/errata/RHSA-2017:2885
http://www.securitytracker.com/id/1039465
Common Vulnerability Exposure (CVE) ID: CVE-2017-7810
BugTraq ID: 101054
http://www.securityfocus.com/bid/101054
https://usn.ubuntu.com/3688-1/
Common Vulnerability Exposure (CVE) ID: CVE-2017-7814
BugTraq ID: 101059
http://www.securityfocus.com/bid/101059
Common Vulnerability Exposure (CVE) ID: CVE-2017-7818
Common Vulnerability Exposure (CVE) ID: CVE-2017-7819
Common Vulnerability Exposure (CVE) ID: CVE-2017-7823
Common Vulnerability Exposure (CVE) ID: CVE-2017-7824
BugTraq ID: 101053
http://www.securityfocus.com/bid/101053
Common Vulnerability Exposure (CVE) ID: CVE-2017-7805
Debian Security Information: DSA-3998 (Google Search)
https://www.debian.org/security/2017/dsa-3998
RedHat Security Advisories: RHSA-2017:2832
https://access.redhat.com/errata/RHSA-2017:2832
CopyrightCopyright (C) 2017 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2024 E-Soft Inc. All rights reserved.