CVE.RADIO
FREN

CVE-2008-5014

MozillaThunderbirdVulnerabilityPatched

No public exploitation has been reported so far. A fixed version is available (see the table below).

Recommended action: Update to the fixed version listed for your distribution using the native package manager.

Affected & fixed versions by distribution

Versions are the native distribution strings (backport-aware): RHEL/Debian/SUSE backport fixes, so compare with the distro version comparator (dpkg / rpm / vercmp), not the upstream version.

DistributionPackageAffectedFixed versionStatus
openSUSE:TumbleweedMozillaThunderbird-91.1.1-1.1fixed
Red Hat:enterprise_linux:4::asfirefox-0:3.0.4-1.el4fixed
Red Hat:enterprise_linux:4::desktopfirefox-0:3.0.4-1.el4fixed
Red Hat:enterprise_linux:4::esfirefox-0:3.0.4-1.el4fixed
Red Hat:enterprise_linux:4::wsfirefox-0:3.0.4-1.el4fixed
Red Hat:enterprise_linux:5::clientfirefox-0:3.0.4-1.el5fixed
Red Hat:enterprise_linux:5::serverfirefox-0:3.0.4-1.el5fixed
Red Hat:enterprise_linux:4::asthunderbird-0:1.5.0.12-17.el4fixed
Red Hat:enterprise_linux:4::desktopthunderbird-0:1.5.0.12-17.el4fixed
Red Hat:enterprise_linux:4::esthunderbird-0:1.5.0.12-17.el4fixed
Red Hat:enterprise_linux:4::wsthunderbird-0:1.5.0.12-17.el4fixed
Red Hat:enterprise_linux:5::clientthunderbird-0:2.0.0.18-1.el5fixed
Red Hat:rhel_productivity:5thunderbird-0:2.0.0.18-1.el5fixed

Sources