Synopsis: Critical: thunderbird security update
Issue Date: 2012-02-16
CVE Numbers: CVE-2011-3026
—
Mozilla Thunderbird is a standalone mail and newsgroup client.
A heap-based buffer overflow flaw was found in the way Thunderbird handled
PNG (Portable Network Graphics) images. An HTML mail message or remote
content containing a specially-crafted PNG image could cause Thunderbird to
crash or, possibly, execute arbitrary code with the privileges of the user
running Thunderbird. (CVE-2011-3026)
All Thunderbird users should upgrade to this updated package, which
corrects this issue. After installing the update, Thunderbird must be
restarted for the changes to take effect.
—
SL6
x86_64
thunderbird-3.1.18-2.el6_2.x86_64.rpm
i386
thunderbird-3.1.18-2.el6_2.i686.rpm
– Scientific Linux Development Team
