This host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities.

Successful exploitation will allow attackers to conduct spoofing attacks, disclose potentially sensitive information, bypass certain security restrictions, and compromise a user's system. Impact Level: System/Application

Upgrade to Mozilla Thunderbird version 24.5 or later, For updates refer to http://www.mozilla.com/en-US/thunderbird

Multiple flaws are due to, - An error exists when validating the XBL status of an object. - An error exists when handling site notifications within the Web Notification API. - An error exists when handling browser navigations through history to load a website. - A use-after-free error exists when handling an imgLoader object within the 'nsGenericHTMLElement::GetWidthHeightForImage()' function. - An error exists in NSS. - A use-after-free error exists when handling host resolution within the 'libxul.so!nsHostResolver::ConditionallyRefreshRecord()' function. - And some unspecified errors exist.

Mozilla Thunderbird version before 24.5 on Windows

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://secunia.com/advisories/58234
• http://www.mozilla.org/security/announce/2014/mfsa2014-34.html
• http://www.osvdb.com/106388

---

Updated on 2015-03-25