- Vulnerability/
- USN-3073-1
USN-3073-1: Thunderbird vulnerabilities
First published: Thu Sep 22 2016(Updated: )
Christian Holler, Carsten Book, Gary Kwong, Jesse Ruderman, Andrew McCreight, and Phil Ringnalda discovered multiple memory safety issues in Thunderbird. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code. (CVE-2016-2836)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/thunderbird | <1:45.3.0+build1-0ubuntu0.16.04.2 | 1:45.3.0+build1-0ubuntu0.16.04.2 |
| Ubuntu gir1.2-packagekitglib-1.0 | =16.04 | |
| All of | ||
| ubuntu/thunderbird | <1:45.3.0+build1-0ubuntu0.14.04.4 | 1:45.3.0+build1-0ubuntu0.14.04.4 |
| Ubuntu gir1.2-packagekitglib-1.0 | =14.04 | |
| All of | ||
| ubuntu/thunderbird | <1:45.3.0+build1-0ubuntu0.12.04.1 | 1:45.3.0+build1-0ubuntu0.12.04.1 |
| Ubuntu gir1.2-packagekitglib-1.0 | =12.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2016-2836
- https://ubuntu.com/security/notices/USN-3044-1
- https://launchpad.net/ubuntu/+source/thunderbird/1:45.3.0+build1-0ubuntu0.16.04.2
- https://launchpad.net/ubuntu/+source/thunderbird/1:45.3.0+build1-0ubuntu0.14.04.4
- https://launchpad.net/ubuntu/+source/thunderbird/1:45.3.0+build1-0ubuntu0.12.04.1
- https://ubuntu.com/security/notices/USN-3073-1 (Advisory)
Frequently Asked Questions
What is the title of the vulnerability?
USN-3073-1: Thunderbird vulnerabilities
Who discovered the vulnerabilities?
Christian Holler, Carsten Book, Gary Kwong, Jesse Ruderman, Andrew McCreight, and Phil Ringnalda
What is the impact of the vulnerability?
An attacker could potentially cause a denial of service via a specially crafted message.
Which versions of Thunderbird are affected?
Versions 1:45.3.0+build1-0ubuntu0.16.04.2, 1:45.3.0+build1-0ubuntu0.14.04.4, and 1:45.3.0+build1-0ubuntu0.12.04.1 of Thunderbird on Ubuntu are affected.
Where can I find more information about the vulnerability?
More information about the vulnerability can be found at the following links: [CVE-2016-2836](https://ubuntu.com/security/CVE-2016-2836), [USN-3044-1](https://ubuntu.com/security/notices/USN-3044-1), [Launchpad](https://launchpad.net/ubuntu/+source/thunderbird/1:45.3.0+build1-0ubuntu0.16.04.2)
- agent/references
- agent/last-modified-date
- agent/first-publish-date
- agent/type
- agent/severity
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu gir1.2-packagekitglib-1.0
- version/ubuntu gir1.2-packagekitglib-1.0/16.04
- version/ubuntu gir1.2-packagekitglib-1.0/14.04
- version/ubuntu gir1.2-packagekitglib-1.0/12.04