This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities.

Successful exploitation will allow attackers to conduct cross-site scripting attacks, bypass certain security restrictions, disclose potentially sensitive information, and compromise a user's system. Impact Level: System/Application

Upgrade to Mozilla Thunderbird version 24.2 or later, For updates refer to http://www.mozilla.com/en-US/thunderbird

Multiple flaws are due to, - Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function. - JavaScript implementation does not properly enforce certain typeset restrictions on the generation of GetElementIC typed array stubs. - Use-after-free vulnerability in the nsEventListenerManager::HandleEvent SubType function - unspecified error in nsGfxScrollFrameInner::IsLTR function. - Flaw is due to the program ignoring the setting to remove the trust for extended validation (EV) capable root certificates.

Mozilla Thunderbird version before 24.2 on Mac OS X

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://secunia.com/advisories/56002
• http://www.mozilla.org/security/announce/2013/mfsa2013-104.html

---

Updated on 2017-03-28