RHSA-2006_0611

Vulnerability from csaf_redhat - Published: 2006-07-29 00:16 - Updated: 2024-11-22 00:27
Summary
Red Hat Security Advisory: thunderbird security update
Severity
Critical
Notes
Topic: Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team.
Details: Mozilla Thunderbird is a standalone mail and newsgroup client. The Mozilla Foundation has discontinued support for the Mozilla Thunderbird 1.0 branch. This update deprecates the Mozilla Thunderbird 1.0 branch in Red Hat Enterprise Linux 4 in favor of the supported Mozilla Thunderbird 1.5 branch. This update also resolves a number of outstanding Thunderbird security issues: Several flaws were found in the way Thunderbird processed certain javascript actions. A malicious mail message could execute arbitrary javascript instructions with the permissions of "chrome", allowing the page to steal sensitive information or install browser malware. (CVE-2006-2776, CVE-2006-2784, CVE-2006-2785, CVE-2006-2787, CVE-2006-3807, CVE-2006-3809) Several denial of service flaws were found in the way Thunderbird processed certain mail messages. A malicious web page could crash the browser or possibly execute arbitrary code as the user running Thunderbird. (CVE-2006-2779, CVE-2006-2780, CVE-2006-3801, CVE-2006-3677, CVE-2006-3113, CVE-2006-3803, CVE-2006-3805, CVE-2006-3806, CVE-2006-3811) Several flaws were found in the way Thunderbird processed certain javascript actions. A malicious mail message could conduct a cross-site scripting attack or steal sensitive information (such as cookies owned by other domains). (CVE-2006-3802, CVE-2006-3810) A form file upload flaw was found in the way Thunderbird handled javascript input object mutation. A malicious mail message could upload an arbitrary local file at form submission time without user interaction. (CVE-2006-2782) A denial of service flaw was found in the way Thunderbird called the crypto.signText() javascript function. A malicious mail message could crash the browser if the victim had a client certificate loaded. (CVE-2006-2778) A flaw was found in the way Thunderbird processed Proxy AutoConfig scripts. A malicious Proxy AutoConfig server could execute arbitrary javascript instructions with the permissions of "chrome", allowing the page to steal sensitive information or install client malware. (CVE-2006-3808) Note: Please note that JavaScript support is disabled by default in Thunderbird. The above issues are not exploitable with JavaScript disabled. Two flaws were found in the way Thunderbird displayed malformed inline vcard attachments. If a victim viewed an email message containing a carefully crafted vcard it was possible to execute arbitrary code as the user running Thunderbird. (CVE-2006-2781, CVE-2006-3804) A cross site scripting flaw was found in the way Thunderbird processed Unicode Byte-order-Mark (BOM) markers in UTF-8 mail messages. A malicious web page could execute a script within the browser that a web input sanitizer could miss due to a malformed "script" tag. (CVE-2006-2783) Two HTTP response smuggling flaws were found in the way Thunderbird processed certain invalid HTTP response headers. A malicious web site could return specially crafted HTTP response headers which may bypass HTTP proxy restrictions. (CVE-2006-2786) A double free flaw was found in the way the nsIX509::getRawDER method was called. If a victim visited a carefully crafted web page, it was possible to crash Thunderbird. (CVE-2006-2788) Users of Thunderbird are advised to upgrade to this update, which contains Thunderbird version 1.5.0.5 that corrects these issues.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2006-2776

Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-2778

The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-2779

Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested <option> tags in a select tag, (2) a DOMNodeRemoved mutation event, (3) "Content-implemented tree views," (4) BoxObjects, (5) the XBL implementation, (6) an iframe that attempts to remove itself, which leads to memory corruption.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-2780

Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "jsstr tagify," which leads to memory corruption.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-2781

Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-2782

Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-2783

Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-2784

The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privileged code by tricking a user into installing missing plugins and selecting the "Manual Install" button, then using nested javascript: URLs. NOTE: the manual install button is used for downloading software from a remote web site, so this issue would not cross privilege boundaries if the user progresses to the point of installing malicious software from the attacker-controlled site.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-2785

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into (1) performing a "View Image" on a broken image in which the SRC attribute contains a Javascript URL, or (2) selecting "Show only this frame" on a frame whose SRC attribute contains a Javascript URL.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-2786

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-2787

EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-2788

Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3113

Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3677

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3801

Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3802

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3803

Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3804

Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) via a VCard attachment with a malformed base64 field, which copies more data than expected due to an integer underflow.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3805

The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3806

Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified "string function arguments."

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3807

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling "named JavaScript functions" that use the constructor.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3808

Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3809

Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sensitive data by reading into a privileged context.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3810

Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapper(window).Function construct.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
CVE-2006-3811

Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) "anonymous box selectors outside of UA stylesheets," (5) stale references to "removed nodes," and (6) running the crypto.generateCRMFRequest callback on deleted context.

Vendor Fix Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date This will start an interactive process that will result in the appropriate RPMs being upgraded on your system. https://access.redhat.com/errata/RHSA-2006:0611
References
https://access.redhat.com/errata/RHSA-2006:0611 self
http://www.redhat.com/security/updates/classifica… external
https://bugzilla.redhat.com/show_bug.cgi?id=197078 external
https://bugzilla.redhat.com/show_bug.cgi?id=200171 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2006-2776 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618112 external
https://www.cve.org/CVERecord?id=CVE-2006-2776 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2776 external
https://access.redhat.com/security/cve/CVE-2006-2778 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618113 external
https://www.cve.org/CVERecord?id=CVE-2006-2778 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2778 external
https://access.redhat.com/security/cve/CVE-2006-2779 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618114 external
https://www.cve.org/CVERecord?id=CVE-2006-2779 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2779 external
https://access.redhat.com/security/cve/CVE-2006-2780 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618115 external
https://www.cve.org/CVERecord?id=CVE-2006-2780 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2780 external
https://access.redhat.com/security/cve/CVE-2006-2781 self
https://bugzilla.redhat.com/show_bug.cgi?id=193963 external
https://www.cve.org/CVERecord?id=CVE-2006-2781 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2781 external
https://access.redhat.com/security/cve/CVE-2006-2782 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618116 external
https://www.cve.org/CVERecord?id=CVE-2006-2782 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2782 external
https://access.redhat.com/security/cve/CVE-2006-2783 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618117 external
https://www.cve.org/CVERecord?id=CVE-2006-2783 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2783 external
https://access.redhat.com/security/cve/CVE-2006-2784 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618118 external
https://www.cve.org/CVERecord?id=CVE-2006-2784 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2784 external
https://access.redhat.com/security/cve/CVE-2006-2785 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618119 external
https://www.cve.org/CVERecord?id=CVE-2006-2785 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2785 external
https://access.redhat.com/security/cve/CVE-2006-2786 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618120 external
https://www.cve.org/CVERecord?id=CVE-2006-2786 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2786 external
https://access.redhat.com/security/cve/CVE-2006-2787 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618121 external
https://www.cve.org/CVERecord?id=CVE-2006-2787 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2787 external
https://access.redhat.com/security/cve/CVE-2006-2788 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618122 external
https://www.cve.org/CVERecord?id=CVE-2006-2788 external
https://nvd.nist.gov/vuln/detail/CVE-2006-2788 external
https://access.redhat.com/security/cve/CVE-2006-3113 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618135 external
https://www.cve.org/CVERecord?id=CVE-2006-3113 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3113 external
https://access.redhat.com/security/cve/CVE-2006-3677 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618153 external
https://www.cve.org/CVERecord?id=CVE-2006-3677 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3677 external
https://access.redhat.com/security/cve/CVE-2006-3801 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618161 external
https://www.cve.org/CVERecord?id=CVE-2006-3801 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3801 external
https://access.redhat.com/security/cve/CVE-2006-3802 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618162 external
https://www.cve.org/CVERecord?id=CVE-2006-3802 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3802 external
https://access.redhat.com/security/cve/CVE-2006-3803 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618163 external
https://www.cve.org/CVERecord?id=CVE-2006-3803 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3803 external
https://access.redhat.com/security/cve/CVE-2006-3804 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618164 external
https://www.cve.org/CVERecord?id=CVE-2006-3804 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3804 external
https://access.redhat.com/security/cve/CVE-2006-3805 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618165 external
https://www.cve.org/CVERecord?id=CVE-2006-3805 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3805 external
https://access.redhat.com/security/cve/CVE-2006-3806 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618166 external
https://www.cve.org/CVERecord?id=CVE-2006-3806 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3806 external
https://access.redhat.com/security/cve/CVE-2006-3807 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618167 external
https://www.cve.org/CVERecord?id=CVE-2006-3807 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3807 external
https://access.redhat.com/security/cve/CVE-2006-3808 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618168 external
https://www.cve.org/CVERecord?id=CVE-2006-3808 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3808 external
https://access.redhat.com/security/cve/CVE-2006-3809 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618169 external
https://www.cve.org/CVERecord?id=CVE-2006-3809 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3809 external
https://access.redhat.com/security/cve/CVE-2006-3810 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618170 external
https://www.cve.org/CVERecord?id=CVE-2006-3810 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3810 external
https://access.redhat.com/security/cve/CVE-2006-3811 self
https://bugzilla.redhat.com/show_bug.cgi?id=1618171 external
https://www.cve.org/CVERecord?id=CVE-2006-3811 external
https://nvd.nist.gov/vuln/detail/CVE-2006-3811 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated thunderbird packages that fix several security bugs are now\navailable for Red Hat Enterprise Linux 4.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nThe Mozilla Foundation has discontinued support for the Mozilla Thunderbird\n1.0 branch. This update deprecates the Mozilla Thunderbird 1.0 branch in\nRed Hat Enterprise Linux 4 in favor of the supported Mozilla Thunderbird\n1.5 branch.\n\nThis update also resolves a number of outstanding Thunderbird security issues:\n\nSeveral flaws were found in the way Thunderbird processed certain\njavascript actions. A malicious mail message could execute arbitrary\njavascript instructions with the permissions of \"chrome\", allowing the page\nto steal sensitive information or install browser malware. (CVE-2006-2776,\nCVE-2006-2784, CVE-2006-2785, CVE-2006-2787, CVE-2006-3807, CVE-2006-3809)\n\nSeveral denial of service flaws were found in the way Thunderbird processed\ncertain mail messages. A malicious web page could crash the browser or\npossibly execute arbitrary code as the user running Thunderbird.\n(CVE-2006-2779, CVE-2006-2780, CVE-2006-3801, CVE-2006-3677,\nCVE-2006-3113, CVE-2006-3803, CVE-2006-3805, CVE-2006-3806, CVE-2006-3811)\n\nSeveral flaws were found in the way Thunderbird processed certain\njavascript actions. A malicious mail message could conduct a cross-site\nscripting attack or steal sensitive information (such as cookies owned by\nother domains). (CVE-2006-3802, CVE-2006-3810)\n\nA form file upload flaw was found in the way Thunderbird handled javascript\ninput object mutation. A malicious mail message could upload an arbitrary\nlocal file at form submission time without user interaction. (CVE-2006-2782)\n\nA denial of service flaw was found in the way Thunderbird called the\ncrypto.signText() javascript function. A malicious mail message could crash\nthe browser if the victim had a client certificate loaded. (CVE-2006-2778)\n\nA flaw was found in the way Thunderbird processed Proxy AutoConfig scripts.\nA malicious Proxy AutoConfig server could execute arbitrary javascript\ninstructions with the permissions of \"chrome\", allowing the page to steal\nsensitive information or install client malware. (CVE-2006-3808)\n\nNote: Please note that JavaScript support is disabled by default in\nThunderbird. The above issues are not exploitable with JavaScript disabled. \n\nTwo flaws were found in the way Thunderbird displayed malformed inline\nvcard attachments. If a victim viewed an email message containing a\ncarefully crafted vcard it was possible to execute arbitrary code as the\nuser running Thunderbird. (CVE-2006-2781, CVE-2006-3804)\n\nA cross site scripting flaw was found in the way Thunderbird processed\nUnicode Byte-order-Mark (BOM) markers in UTF-8 mail messages. A malicious\nweb page could execute a script within the browser that a web input\nsanitizer could miss due to a malformed \"script\" tag. (CVE-2006-2783)\n\nTwo HTTP response smuggling flaws were found in the way Thunderbird\nprocessed certain invalid HTTP response headers. A malicious web site could\nreturn specially crafted HTTP response headers which may bypass HTTP proxy\nrestrictions. (CVE-2006-2786)\n\nA double free flaw was found in the way the nsIX509::getRawDER method was\ncalled. If a victim visited a carefully crafted web page, it was possible\nto crash Thunderbird. (CVE-2006-2788)\n\nUsers of Thunderbird are advised to upgrade to this update, which contains\nThunderbird version 1.5.0.5 that corrects these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2006:0611",
        "url": "https://access.redhat.com/errata/RHSA-2006:0611"
      },
      {
        "category": "external",
        "summary": "http://www.redhat.com/security/updates/classification/#critical",
        "url": "http://www.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "197078",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=197078"
      },
      {
        "category": "external",
        "summary": "200171",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=200171"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0611.json"
      }
    ],
    "title": "Red Hat Security Advisory: thunderbird security update",
    "tracking": {
      "current_release_date": "2024-11-22T00:27:24+00:00",
      "generator": {
        "date": "2024-11-22T00:27:24+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2006:0611",
      "initial_release_date": "2006-07-29T00:16:00+00:00",
      "revision_history": [
        {
          "date": "2006-07-29T00:16:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2006-07-28T00:00:00+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T00:27:24+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4",
                  "product_id": "4AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux Desktop version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux Desktop version 4",
                  "product_id": "4Desktop",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::desktop"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4",
                  "product_id": "4ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4",
                  "product_id": "4WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:4::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.5-0.el4.1.ia64",
                "product": {
                  "name": "thunderbird-0:1.5.0.5-0.el4.1.ia64",
                  "product_id": "thunderbird-0:1.5.0.5-0.el4.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.5-0.el4.1?arch=ia64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.5-0.el4.1?arch=ia64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.5-0.el4.1.src",
                "product": {
                  "name": "thunderbird-0:1.5.0.5-0.el4.1.src",
                  "product_id": "thunderbird-0:1.5.0.5-0.el4.1.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.5-0.el4.1?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.5-0.el4.1.x86_64",
                "product": {
                  "name": "thunderbird-0:1.5.0.5-0.el4.1.x86_64",
                  "product_id": "thunderbird-0:1.5.0.5-0.el4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.5-0.el4.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.5-0.el4.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.5-0.el4.1.i386",
                "product": {
                  "name": "thunderbird-0:1.5.0.5-0.el4.1.i386",
                  "product_id": "thunderbird-0:1.5.0.5-0.el4.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.5-0.el4.1?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.5-0.el4.1?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.5-0.el4.1.ppc",
                "product": {
                  "name": "thunderbird-0:1.5.0.5-0.el4.1.ppc",
                  "product_id": "thunderbird-0:1.5.0.5-0.el4.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.5-0.el4.1?arch=ppc"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.5-0.el4.1?arch=ppc"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.5-0.el4.1.s390x",
                "product": {
                  "name": "thunderbird-0:1.5.0.5-0.el4.1.s390x",
                  "product_id": "thunderbird-0:1.5.0.5-0.el4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.5-0.el4.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.5-0.el4.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "thunderbird-0:1.5.0.5-0.el4.1.s390",
                "product": {
                  "name": "thunderbird-0:1.5.0.5-0.el4.1.s390",
                  "product_id": "thunderbird-0:1.5.0.5-0.el4.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird@1.5.0.5-0.el4.1?arch=s390"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
                "product": {
                  "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
                  "product_id": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/thunderbird-debuginfo@1.5.0.5-0.el4.1?arch=s390"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.src as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.5-0.el4.1.src"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.src",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64 as a component of Red Hat Enterprise Linux AS version 4",
          "product_id": "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
        "relates_to_product_reference": "4AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.src as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.src",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64 as a component of Red Hat Enterprise Linux Desktop version 4",
          "product_id": "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
        "relates_to_product_reference": "4Desktop"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.src as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.5-0.el4.1.src"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.src",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64 as a component of Red Hat Enterprise Linux ES version 4",
          "product_id": "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
        "relates_to_product_reference": "4ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.src as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.5-0.el4.1.src"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.src",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-0:1.5.0.5-0.el4.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64"
        },
        "product_reference": "thunderbird-0:1.5.0.5-0.el4.1.x86_64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
        "relates_to_product_reference": "4WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64 as a component of Red Hat Enterprise Linux WS version 4",
          "product_id": "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        },
        "product_reference": "thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
        "relates_to_product_reference": "4WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2006-2776",
      "discovery_date": "2006-05-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618112"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2776"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618112",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618112"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2776",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2776"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2776",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2776"
        }
      ],
      "release_date": "2006-06-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2778",
      "discovery_date": "2006-05-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618113"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2778"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618113",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618113"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2778",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2778"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2778",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2778"
        }
      ],
      "release_date": "2006-06-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2779",
      "discovery_date": "2006-06-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618114"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested \u003coption\u003e tags in a select tag, (2) a DOMNodeRemoved mutation event, (3) \"Content-implemented tree views,\" (4) BoxObjects, (5) the XBL implementation, (6) an iframe that attempts to remove itself, which leads to memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2779"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618114",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618114"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2779",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2779"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2779",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2779"
        }
      ],
      "release_date": "2006-06-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2780",
      "discovery_date": "2006-06-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618115"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via \"jsstr tagify,\" which leads to memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2780"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618115",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618115"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2780",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2780"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2780",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2780"
        }
      ],
      "release_date": "2006-06-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2781",
      "discovery_date": "2006-06-01T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "193963"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "(seamonkey): DOS/arbitrary code execution vuln with vcards",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2781"
        },
        {
          "category": "external",
          "summary": "RHBZ#193963",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=193963"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2781",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2781"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2781",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2781"
        }
      ],
      "release_date": "2006-06-02T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "(seamonkey): DOS/arbitrary code execution vuln with vcards"
    },
    {
      "cve": "CVE-2006-2782",
      "discovery_date": "2006-05-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618116"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2782"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618116",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618116"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2782",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2782"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2782",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2782"
        }
      ],
      "release_date": "2006-06-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2783",
      "discovery_date": "2006-05-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618117"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2783"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618117",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618117"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2783",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2783"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2783",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2783"
        }
      ],
      "release_date": "2006-06-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2784",
      "discovery_date": "2006-05-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618118"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privileged code by tricking a user into installing missing plugins and selecting the \"Manual Install\" button, then using nested javascript: URLs.  NOTE: the manual install button is used for downloading software from a remote web site, so this issue would not cross privilege boundaries if the user progresses to the point of installing malicious software from the attacker-controlled site.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2784"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618118",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618118"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2784",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2784"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2784",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2784"
        }
      ],
      "release_date": "2006-06-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2785",
      "discovery_date": "2006-05-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618119"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inject arbitrary web script or HTML by tricking a user into (1) performing a \"View Image\" on a broken image in which the SRC attribute contains a Javascript URL, or (2) selecting \"Show only this frame\" on a frame whose SRC attribute contains a Javascript URL.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2785"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618119",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618119"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2785",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2785"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2785",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2785"
        }
      ],
      "release_date": "2006-06-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2786",
      "discovery_date": "2006-05-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618120"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2786"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618120",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618120"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2786",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2786"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2786",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2786"
        }
      ],
      "release_date": "2006-06-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2787",
      "discovery_date": "2006-05-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618121"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascript that calls the valueOf method on objects that were created outside of the sandbox.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2787"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618121",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618121"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2787",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2787"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2787",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2787"
        }
      ],
      "release_date": "2006-06-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-2788",
      "discovery_date": "2006-05-31T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618122"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via certain Javascript code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-2788"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618122",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618122"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-2788",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-2788"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-2788",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-2788"
        }
      ],
      "release_date": "2006-06-01T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3113",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618135"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3113"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618135",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618135"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3113",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3113"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3113",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3113"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3677",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618153"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java starts up, which causes a crash that leads to code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3677"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618153",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618153"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3677",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3677"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3677",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3677"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3801",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618161"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitrary native code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3801"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618161",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618161"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3801",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3801"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3801",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3801"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3802",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618162"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks using DOM methods of the top-level object.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3802"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618162",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618162"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3802",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3802"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3802",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3802"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3803",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618163"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garbage collector to delete a temporary variable while it is still being used during the creation of a new Function object.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3803"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618163",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618163"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3803",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3803"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3803",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3803"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3804",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618164"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) via a VCard attachment with a malformed base64 field, which copies more data than expected due to an integer underflow.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3804"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618164",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618164"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3804",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3804"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3804",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3804"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3805",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618165"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes deletion of a temporary object that is still being used.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3805"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618165",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618165"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3805",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3805"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3805",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3805"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3806",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618166"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (1) long strings in the toSource method of the Object, Array, and String objects; and (2) unspecified \"string function arguments.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3806"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618166",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618166"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3806",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3806"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3806",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3806"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3807",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618167"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling \"named JavaScript functions\" that use the constructor.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3807"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618167",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618167"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3807",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3807"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3807",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3807"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3808",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618168"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3808"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618168",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618168"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3808",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3808"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3808",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3808"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3809",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618169"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sensitive data by reading into a privileged context.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3809"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618169",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618169"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3809",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3809"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3809",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3809"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3810",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618170"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapper(window).Function construct.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3810"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618170",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618170"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3810",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3810"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3810",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3810"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "security flaw"
    },
    {
      "cve": "CVE-2006-3811",
      "discovery_date": "2006-07-24T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1618171"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) \"anonymous box selectors outside of UA stylesheets,\" (5) stale references to \"removed nodes,\" and (6) running the crypto.generateCRMFRequest callback on deleted context.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "security flaw",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
          "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
          "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2006-3811"
        },
        {
          "category": "external",
          "summary": "RHBZ#1618171",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1618171"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2006-3811",
          "url": "https://www.cve.org/CVERecord?id=CVE-2006-3811"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2006-3811",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-3811"
        }
      ],
      "release_date": "2006-07-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2006-07-29T00:16:00+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nThis update is available via Red Hat Network.  To use Red Hat Network,\nlaunch the Red Hat Update Agent with the following command:\n\nup2date\n\nThis will start an interactive process that will result in the appropriate\nRPMs being upgraded on your system.",
          "product_ids": [
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4AS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4AS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4Desktop:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4Desktop:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4ES:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4ES:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.src",
            "4WS:thunderbird-0:1.5.0.5-0.el4.1.x86_64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.i386",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ia64",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.ppc",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.s390x",
            "4WS:thunderbird-debuginfo-0:1.5.0.5-0.el4.1.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2006:0611"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "security flaw"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.