Issued:
2008-10-01
Updated:
2008-10-01

RHSA-2008:0908 - Security Advisory

Synopsis

Moderate: thunderbird security update

Type/Severity

Security Advisory: Moderate

Topic

Updated thunderbird packages that fix several security issues are now
available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the processing of malformed HTML mail content.
An HTML mail message containing malicious content could cause Thunderbird
to crash or, potentially, execute arbitrary code as the user running
Thunderbird. (CVE-2008-0016, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060,
CVE-2008-4061, CVE-2008-4062)

Several flaws were found in the way malformed HTML mail content was
displayed. An HTML mail message containing specially crafted content could
potentially trick a Thunderbird user into surrendering sensitive
information. (CVE-2008-3835, CVE-2008-4067, CVE-2008-4068)

A flaw was found in Thunderbird that caused certain characters to be
stripped from JavaScript code. This flaw could allow malicious JavaScript
to bypass or evade script filters. (CVE-2008-4065, CVE-2008-4066)

Note: JavaScript support is disabled by default in Thunderbird; the above
issue is not exploitable unless JavaScript is enabled.

A heap based buffer overflow flaw was found in the handling of cancelled
newsgroup messages. If the user cancels a specially crafted newsgroup
message it could cause Thunderbird to crash or, potentially, execute
arbitrary code as the user running Thunderbird. (CVE-2008-4070)

All Thunderbird users should upgrade to these updated packages, which
resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 5.2 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.2 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 4.7 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 4.7 ia64
  • Red Hat Enterprise Linux Server - Extended Update Support 4.7 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.7 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

  • BZ - 463181 - CVE-2008-0016 Mozilla UTF-8 stack buffer overflow
  • BZ - 463182 - CVE-2008-3835 mozilla: nsXMLDocument::OnChannelRedirect() same-origin violation
  • BZ - 463190 - CVE-2008-4058 Mozilla privilege escalation via XPCnativeWrapper pollution
  • BZ - 463192 - CVE-2008-4059 Mozilla privilege escalation via XPCnativeWrapper pollution
  • BZ - 463198 - CVE-2008-4060 Mozilla privilege escalation via XPCnativeWrapper pollution
  • BZ - 463199 - CVE-2008-4061 Mozilla layout engine crash
  • BZ - 463201 - CVE-2008-4062 Mozilla crashes with evidence of memory corruption
  • BZ - 463234 - CVE-2008-4065 Mozilla BOM characters stripped from JavaScript before execution
  • BZ - 463243 - CVE-2008-4066 Mozilla low surrogates stripped from JavaScript before execution
  • BZ - 463246 - CVE-2008-4067 Mozilla resource: traversal vulnerability
  • BZ - 463248 - CVE-2008-4068 Mozilla local HTML file recource: bypass
  • BZ - 464041 - CVE-2008-4070 Thunderbird cancelled newsgrop messages

CVEs

References

Red Hat Enterprise Linux Server 5

SRPM
thunderbird-2.0.0.17-1.el5.src.rpm SHA-256: e00447248c725e034ee9645e3e8a69a17dd37e301a7801247a41114fd616ed3d
x86_64
thunderbird-2.0.0.17-1.el5.x86_64.rpm SHA-256: 64dc07f1cd2181f7daac19c104de30553168b45caad8c8929a043fa3f7b081fd
i386
thunderbird-2.0.0.17-1.el5.i386.rpm SHA-256: 26cc8f433c3d241b17d4f0bbdc1913b85dab0ad10d4f9e2a53b25dca98cefba9

Red Hat Enterprise Linux Server 4

SRPM
thunderbird-1.5.0.12-16.el4.src.rpm SHA-256: 28c60f90bcbb1251e9f8908e7719992d3f10b28bd0ce5b2e9441385c705d5a55
x86_64
thunderbird-1.5.0.12-16.el4.x86_64.rpm SHA-256: 1c9c0d11a6d916168dcc9dd9dc58645b2f17bb9dcb4e79ed074b90dde10c0e3e
thunderbird-1.5.0.12-16.el4.x86_64.rpm SHA-256: 1c9c0d11a6d916168dcc9dd9dc58645b2f17bb9dcb4e79ed074b90dde10c0e3e
ia64
thunderbird-1.5.0.12-16.el4.ia64.rpm SHA-256: 4e0f228452333fe3234ee3a898cbfbb5670b4dded3e444d86bb6d3730322d8b9
thunderbird-1.5.0.12-16.el4.ia64.rpm SHA-256: 4e0f228452333fe3234ee3a898cbfbb5670b4dded3e444d86bb6d3730322d8b9
i386
thunderbird-1.5.0.12-16.el4.i386.rpm SHA-256: 5fc749750d7551b1af3c9f2f2b0f3f86507d6df19aaecbbfd30c543f4eb38301
thunderbird-1.5.0.12-16.el4.i386.rpm SHA-256: 5fc749750d7551b1af3c9f2f2b0f3f86507d6df19aaecbbfd30c543f4eb38301

Red Hat Enterprise Linux Server - Extended Update Support 4.7

SRPM
thunderbird-1.5.0.12-16.el4.src.rpm SHA-256: 28c60f90bcbb1251e9f8908e7719992d3f10b28bd0ce5b2e9441385c705d5a55
x86_64
thunderbird-1.5.0.12-16.el4.x86_64.rpm SHA-256: 1c9c0d11a6d916168dcc9dd9dc58645b2f17bb9dcb4e79ed074b90dde10c0e3e
thunderbird-1.5.0.12-16.el4.x86_64.rpm SHA-256: 1c9c0d11a6d916168dcc9dd9dc58645b2f17bb9dcb4e79ed074b90dde10c0e3e
ia64
thunderbird-1.5.0.12-16.el4.ia64.rpm SHA-256: 4e0f228452333fe3234ee3a898cbfbb5670b4dded3e444d86bb6d3730322d8b9
thunderbird-1.5.0.12-16.el4.ia64.rpm SHA-256: 4e0f228452333fe3234ee3a898cbfbb5670b4dded3e444d86bb6d3730322d8b9
i386
thunderbird-1.5.0.12-16.el4.i386.rpm SHA-256: 5fc749750d7551b1af3c9f2f2b0f3f86507d6df19aaecbbfd30c543f4eb38301
thunderbird-1.5.0.12-16.el4.i386.rpm SHA-256: 5fc749750d7551b1af3c9f2f2b0f3f86507d6df19aaecbbfd30c543f4eb38301

Red Hat Enterprise Linux Workstation 5

SRPM
thunderbird-2.0.0.17-1.el5.src.rpm SHA-256: e00447248c725e034ee9645e3e8a69a17dd37e301a7801247a41114fd616ed3d
x86_64
thunderbird-2.0.0.17-1.el5.x86_64.rpm SHA-256: 64dc07f1cd2181f7daac19c104de30553168b45caad8c8929a043fa3f7b081fd
i386
thunderbird-2.0.0.17-1.el5.i386.rpm SHA-256: 26cc8f433c3d241b17d4f0bbdc1913b85dab0ad10d4f9e2a53b25dca98cefba9

Red Hat Enterprise Linux Workstation 4

SRPM
thunderbird-1.5.0.12-16.el4.src.rpm SHA-256: 28c60f90bcbb1251e9f8908e7719992d3f10b28bd0ce5b2e9441385c705d5a55
x86_64
thunderbird-1.5.0.12-16.el4.x86_64.rpm SHA-256: 1c9c0d11a6d916168dcc9dd9dc58645b2f17bb9dcb4e79ed074b90dde10c0e3e
ia64
thunderbird-1.5.0.12-16.el4.ia64.rpm SHA-256: 4e0f228452333fe3234ee3a898cbfbb5670b4dded3e444d86bb6d3730322d8b9
i386
thunderbird-1.5.0.12-16.el4.i386.rpm SHA-256: 5fc749750d7551b1af3c9f2f2b0f3f86507d6df19aaecbbfd30c543f4eb38301

Red Hat Enterprise Linux Desktop 5

SRPM
thunderbird-2.0.0.17-1.el5.src.rpm SHA-256: e00447248c725e034ee9645e3e8a69a17dd37e301a7801247a41114fd616ed3d
x86_64
thunderbird-2.0.0.17-1.el5.x86_64.rpm SHA-256: 64dc07f1cd2181f7daac19c104de30553168b45caad8c8929a043fa3f7b081fd
i386
thunderbird-2.0.0.17-1.el5.i386.rpm SHA-256: 26cc8f433c3d241b17d4f0bbdc1913b85dab0ad10d4f9e2a53b25dca98cefba9

Red Hat Enterprise Linux Desktop 4

SRPM
thunderbird-1.5.0.12-16.el4.src.rpm SHA-256: 28c60f90bcbb1251e9f8908e7719992d3f10b28bd0ce5b2e9441385c705d5a55
x86_64
thunderbird-1.5.0.12-16.el4.x86_64.rpm SHA-256: 1c9c0d11a6d916168dcc9dd9dc58645b2f17bb9dcb4e79ed074b90dde10c0e3e
i386
thunderbird-1.5.0.12-16.el4.i386.rpm SHA-256: 5fc749750d7551b1af3c9f2f2b0f3f86507d6df19aaecbbfd30c543f4eb38301

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
thunderbird-1.5.0.12-16.el4.src.rpm SHA-256: 28c60f90bcbb1251e9f8908e7719992d3f10b28bd0ce5b2e9441385c705d5a55
s390x
thunderbird-1.5.0.12-16.el4.s390x.rpm SHA-256: 85715a431f60e2dd349f379eae644f4ee7598e678a70608485962058abb2c5de
s390
thunderbird-1.5.0.12-16.el4.s390.rpm SHA-256: 091c47be36bb9db2119cf23e2fbac04bf360066215a0df127a9d0084a64da495

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7

SRPM
thunderbird-1.5.0.12-16.el4.src.rpm SHA-256: 28c60f90bcbb1251e9f8908e7719992d3f10b28bd0ce5b2e9441385c705d5a55
s390x
thunderbird-1.5.0.12-16.el4.s390x.rpm SHA-256: 85715a431f60e2dd349f379eae644f4ee7598e678a70608485962058abb2c5de
s390
thunderbird-1.5.0.12-16.el4.s390.rpm SHA-256: 091c47be36bb9db2119cf23e2fbac04bf360066215a0df127a9d0084a64da495

Red Hat Enterprise Linux for Power, big endian 4

SRPM
thunderbird-1.5.0.12-16.el4.src.rpm SHA-256: 28c60f90bcbb1251e9f8908e7719992d3f10b28bd0ce5b2e9441385c705d5a55
ppc
thunderbird-1.5.0.12-16.el4.ppc.rpm SHA-256: 1624a7c1873d059b8942f93f9d6e450333b1ad640c4efd5caeb962cc23866ee1

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.7

SRPM
thunderbird-1.5.0.12-16.el4.src.rpm SHA-256: 28c60f90bcbb1251e9f8908e7719992d3f10b28bd0ce5b2e9441385c705d5a55
ppc
thunderbird-1.5.0.12-16.el4.ppc.rpm SHA-256: 1624a7c1873d059b8942f93f9d6e450333b1ad640c4efd5caeb962cc23866ee1

Red Hat Enterprise Linux Server from RHUI 5

SRPM
thunderbird-2.0.0.17-1.el5.src.rpm SHA-256: e00447248c725e034ee9645e3e8a69a17dd37e301a7801247a41114fd616ed3d
x86_64
thunderbird-2.0.0.17-1.el5.x86_64.rpm SHA-256: 64dc07f1cd2181f7daac19c104de30553168b45caad8c8929a043fa3f7b081fd
i386
thunderbird-2.0.0.17-1.el5.i386.rpm SHA-256: 26cc8f433c3d241b17d4f0bbdc1913b85dab0ad10d4f9e2a53b25dca98cefba9

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.