Test ID:	1.3.6.1.4.1.25623.1.0.881688
Category:	CentOS Local Security Checks
Title:	CentOS Update for thunderbird CESA-2013:0627 centos6
Summary:	The remote host is missing an update for the 'thunderbird'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'thunderbird' package(s) announced via the referenced advisory. Vulnerability Insight: Mozilla Thunderbird is a standalone mail and newsgroup client. A flaw was found in the processing of malformed content. Malicious content could cause Thunderbird to crash or execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2013-0787) Red Hat would like to thank the Mozilla project for reporting this issue. Upstream acknowledges VUPEN Security via the TippingPoint Zero Day Initiative project as the original reporter. Note: This issue cannot be exploited by a specially-crafted HTML mail message as JavaScript is disabled by default for mail messages. It could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed. All Thunderbird users should upgrade to this updated package, which corrects this issue. After installing the update, Thunderbird must be restarted for the changes to take effect. Affected Software/OS: thunderbird on CentOS 6 Solution: Please install the updated packages. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0787 BugTraq ID: 58391 http://www.securityfocus.com/bid/58391 Debian Security Information: DSA-2699 (Google Search) http://www.debian.org/security/2013/dsa-2699 http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157 http://twitter.com/VUPEN/statuses/309505403631325184 http://twitter.com/thezdi/statuses/309484730506698752 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16737 RedHat Security Advisories: RHSA-2013:0614 http://rhn.redhat.com/errata/RHSA-2013-0614.html RedHat Security Advisories: RHSA-2013:0627 http://rhn.redhat.com/errata/RHSA-2013-0627.html SuSE Security Announcement: SUSE-SU-2013:0470 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00028.html SuSE Security Announcement: openSUSE-SU-2013:0431 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00010.html SuSE Security Announcement: openSUSE-SU-2013:0465 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00023.html SuSE Security Announcement: openSUSE-SU-2013:0467 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00025.html SuSE Security Announcement: openSUSE-SU-2013:0468 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00026.html http://www.ubuntu.com/usn/USN-1758-1
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.