This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities.

Successful exploitation will allow attackers to conduct spoofing attacks, disclose potentially sensitive information, bypass certain security restrictions, and compromise a user's system. Impact Level: System/Application

Upgrade to Mozilla Thunderbird version 24.4 or later, For updates refer to http://www.mozilla.com/en-US/thunderbird

Multiple flaws are due to, - Local users can gain privileges by modifying the extracted Mar contents during an update. - A boundary error when decoding WAV audio files. - An error when performing polygon rendering in MathML. - The session-restore feature does not consider the Content Security Policy of a data URL. - A timing error when processing SVG format images with filters and displacements. - A use-after-free error when handling garbage collection of TypeObjects under memory pressure. - An error within the TypedArrayObject implementation when handling neutered ArrayBuffer objects. - And some unspecified errors exist.

Mozilla Thunderbird version before 24.4 on Mac OS X

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://secunia.com/advisories/57500
• http://www.mozilla.org/security/announce/2014/mfsa2014-15.html

---

Updated on 2017-03-28