USN-1758-2: Thunderbird vulnerability

Ubuntu Security Notice USN-1758-2

12th March, 2013

thunderbird vulnerability

A security issue affects these releases of Ubuntu and its derivatives:

  • Ubuntu 12.10
  • Ubuntu 12.04 LTS
  • Ubuntu 11.10
  • Ubuntu 10.04 LTS

Summary

Thunderbird could be made to crash or run programs as your login.

Software description

  • thunderbird - Mozilla Open Source mail and newsgroup client

Details

USN-1758-1 fixed vulnerabilities in Firefox. This update provides the
corresponding update for Thunderbird.

Original advisory details:

It was discovered that Firefox contained a memory safety issue. If a user
were tricked into opening a specially crafted page with the HTML editor, a
remote attacker could exploit this to execute arbitrary code with the
privileges of the user invoking the program.

Update instructions

The problem can be corrected by updating your system to the following package version:

Ubuntu 12.10:
thunderbird 17.0.4+build1-0ubuntu0.12.10.1
Ubuntu 12.04 LTS:
thunderbird 17.0.4+build1-0ubuntu0.12.04.1
Ubuntu 11.10:
thunderbird 17.0.4+build1-0ubuntu0.11.10.1
Ubuntu 10.04 LTS:
thunderbird 17.0.4+build1-0ubuntu0.10.04.1

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to restart Thunderbird to make all
the necessary changes.

References

CVE-2013-0787