MGASA-2015-0492

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2015-0492.html
Import Source
https://advisories.mageia.org/MGASA-2015-0492.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2015-0492
Upstream
  • CVE-2015-7201
  • CVE-2015-7205
  • CVE-2015-7212
  • CVE-2015-7213
  • CVE-2015-7214
Published
2015-12-28T19:23:26Z
Modified
2026-04-16T06:22:20.955071336Z
Summary
Updated thunderbird packages fix security vulnerabilities
Details

Updated thunderbird packages fix security vulnerabilities:

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird (CVE-2015-7201, CVE-2015-7205, CVE-2015-7210, CVE-2015-7212, CVE-2015-7213, CVE-2015-7222).

A flaw was found in the way Thunderbird handled content using the 'data:' and 'view-source:' URIs. An attacker could use this flaw to bypass the same-origin policy and read data from cross-site URLs and local files (CVE-2015-7214).

References
Credits

Affected packages

Mageia:5 / thunderbird

Package

Name
thunderbird
Purl
pkg:rpm/mageia/thunderbird?arch=source&distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
38.5.0-1.mga5

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2015-0492.json"

Mageia:5 / thunderbird-l10n

Package

Name
thunderbird-l10n
Purl
pkg:rpm/mageia/thunderbird-l10n?arch=source&distro=mageia-5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
38.5.0-1.mga5

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2015-0492.json"