The host is installed with Mozilla Thunderbird ESR and is prone to multiple vulnerabilities.

Successful exploitation will let attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site. Impact Level: Application

Upgrade to Thunderbird ESR version 10.0.9 or later, For updates refer to http://www.mozilla.org/en-US/thunderbird

Security wrappers are unwrapped without doing a security check in defaultValue(). This can allow for improper access to the Location object.

Thunderbird ESR versions 10.x before 10.0.9 on Windows

• http://secunia.com/advisories/50856
• http://secunia.com/advisories/50935
• http://www.mozilla.org/security/announce/2012/mfsa2012-89.html

---

Updated on 2015-03-25