Thunderbird: various vulnerabilities

Users of Thunderbird please be advised of vulnerabilities that has been identified.
To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

USN-998-1: [USN-998-1] Thunderbird vulnerabilities
Details follow:

Paul Nickerson, Jesse Ruderman, Olli Pettay, Igor Bukanov, Josh Soref, Gary

Kwong, Martijn Wargers, Siddharth Agarwal and Michal Zalewski discovered

various flaws in the browser engine. An attacker could exploit this to

crash Thunderbird or possibly run arbitrary code as the user invoking the

program. (CVE-2010-3175, CVE-2010-3176)

Eduardo Vela Nava discovered that Thunderbird could be made to violate the

same-origin policy by using modal calls with JavaScript. If JavaScript were

enabled, an attacker could exploit this to steal information from another

site. (CVE-2010-3178)Read more at http://www.criticalwatch.com
 

Advertisements