The host is installed with Mozilla Thunderbird, that is prone to multiple vulnerabilities.

Successful exploitation could result in remote arbitrary code execution, spoofing attacks, sensitive information disclosure, and can crash the browser. Impact Level: System

Upgrade to Thunderbird version 2.0.0.16 http://www.mozilla.com/en-US/thunderbird/all-older.html

The issues are due to, - multiple errors in the layout and JavaScript engines that can corrupt memory. - error while handling unprivileged XUL documents that can be exploited to load chrome scripts from a fastload file via <script> elements. - error in mozIJSSubScriptLoader.LoadScript function that can bypass XPCNativeWrappers. - error in block re-flow process, which can potentially lead to crash. - errors in the implementation of the Javascript same origin policy - error in processing of Alt Names provided by peer. - error in processing of windows URL shortcuts.

Thunderbird version prior to 2.0.0.16 on Linux.

• http://www.mozilla.org/security/announce/2008/mfsa2008-21.html
• http://www.mozilla.org/security/announce/2008/mfsa2008-24.html
• http://www.mozilla.org/security/announce/2008/mfsa2008-25.html
• http://www.mozilla.org/security/announce/2008/mfsa2008-29.html
• http://www.mozilla.org/security/announce/2008/mfsa2008-31.html
• http://www.mozilla.org/security/announce/2008/mfsa2008-33.html

---

Updated on 2015-03-25