title: Red Hat Security Advisory: thunderbird security update
description: Mozilla UTF-8 stack buffer overflow mozilla: nsXMLDocument:: OnChannelRedirect() same-origin violation Mozilla privilege escalation via XPCnativeWrapper pollution Mozilla privilege escalation via XPCnativeWrapper pollution Mozilla privilege escalation via XPCnativeWrapper pollution Mozilla layout engine crash Mozilla crashes with evidence of memory corruption Mozilla BOM characters stripped from JavaScript before execution Mozilla low surrogates stripped from JavaScript before execution resource: traversal vulnerability recource: bypass Thunderbird cancelled newsgrop messages
cpes: cpe:/a:redhat:rhel_productivity:5 cpe:/o:redhat:enterprise_linux:4::as cpe:/o:redhat:enterprise_linux:4::desktop cpe:/o:redhat:enterprise_linux:4::es cpe:/o:redhat:enterprise_linux:4::ws cpe:/o:redhat:enterprise_linux:5::client