MGASA-2015-0387

Source
https://advisories.mageia.org/MGASA-2015-0387.html
Import Source
https://advisories.mageia.org/MGASA-2015-0387.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2015-0387
Upstream
  • CVE-2015-4500
  • CVE-2015-4509
  • CVE-2015-4517
  • CVE-2015-4519
  • CVE-2015-4520
  • CVE-2015-4521
  • CVE-2015-4522
  • CVE-2015-7174
  • CVE-2015-7175
  • CVE-2015-7176
  • CVE-2015-7177
  • CVE-2015-7180
Published
2015-10-02T12:38:21Z
Modified
2026-04-16T06:25:38.947310812Z
Summary
Updated thunderbird packages fix security vulnerabilities
Details

Updated thunderbird packages fix security vulnerabilities:

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird (CVE-2015-4500, CVE-2015-4509, CVE-2015-4517, CVE-2015-4521, CVE-2015-4522, CVE-2015-7174, CVE-2015-7175, CVE-2015-7176, CVE-2015-7177, CVE-2015-7180).

Two information leak flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to disclose sensitive information or, in certain cases, crash (CVE-2015-4519, CVE-2015-4520).

References
Credits

Affected packages

Mageia:5 / thunderbird

Package

Name
thunderbird
Purl
pkg:rpm/mageia/thunderbird?arch=source&distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
38.3.0-1.mga5

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2015-0387.json"

Mageia:5 / thunderbird-l10n

Package

Name
thunderbird-l10n
Purl
pkg:rpm/mageia/thunderbird-l10n?arch=source&distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
38.3.0-1.mga5

Ecosystem specific

{
    "section": "core"
}

Database specific

source
"https://advisories.mageia.org/MGASA-2015-0387.json"