Threats Tagged 'cve-2025-3875'

Multiple security vulnerabilities were identified in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 8.8. These include JavaScript execution via spoofed PDF attachments and file:/// links, sender spoofing through malformed From headers, unsolicited file downloads causing disk space exhaustion and credential leakage via mailbox:/// links, and tracking links in attachments bypassing remote content blocking. Red Hat has issued an important security advisory with updates addressing these issues for Thunderbird version 128.10.1-1.el8_8. The vulnerabilities have a high severity rating but no CVSS scores are provided. Users of affected Red Hat Enterprise Linux 8.8 versions should apply the provided updates to mitigate these risks.

Multiple security vulnerabilities have been identified and fixed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 8. These include issues such as JavaScript execution via spoofed PDF attachments, sender spoofing, unsolicited file downloads, tracking link bypasses, out-of-bounds memory access, clickjacking, and memory safety bugs. The Red Hat advisory RHSA-2025:8756 provides updates addressing these vulnerabilities. The update is rated as important by Red Hat Product Security.

Multiple security vulnerabilities affecting Mozilla Thunderbird in Red Hat Enterprise Linux 8.6 have been addressed. These include JavaScript execution via spoofed PDF attachments and file:/// links, sender spoofing through malformed From headers, unsolicited file downloads causing disk space exhaustion and credential leakage via mailbox:/// links, and tracking links in attachments bypassing remote content blocking. Red Hat has issued an important security advisory with updates to mitigate these issues.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 8.4. These include JavaScript execution via spoofed PDF attachments, sender spoofing through malformed From headers, unsolicited file downloads leading to disk space exhaustion and credential leakage, and tracking links bypassing remote content blocking. Red Hat has issued an important security update addressing these issues.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9.4 Extended Update Support. These include JavaScript execution via spoofed PDF attachments and file:/// links, sender spoofing through malformed From headers, unsolicited file downloads causing disk space exhaustion and credential leakage via mailbox:/// links, and tracking links in attachments bypassing remote content blocking. Red Hat has released an important security update addressing these issues for Thunderbird on RHEL 9.4.

Multiple security vulnerabilities affecting Mozilla Thunderbird in Red Hat Enterprise Linux 9.0 have been addressed in an important security update. These include JavaScript execution via spoofed PDF attachments and file:/// links, sender spoofing through malformed From headers, unsolicited file downloads leading to disk space exhaustion and credential leakage via mailbox:/// links, and tracking links in attachments bypassing remote content blocking. The update mitigates these issues to protect users from potential exploitation.

Multiple security vulnerabilities affecting Mozilla Thunderbird in Red Hat Enterprise Linux 9.2 Extended Update Support have been addressed. These include JavaScript execution via spoofed PDF attachments and file:/// links, sender spoofing via malformed From headers, unsolicited file downloads leading to disk space exhaustion and credential leakage via mailbox:/// links, and tracking links in attachments bypassing remote content blocking. The update is rated as important by Red Hat Product Security and affects Thunderbird version 128.10.1-1.el9_2. No CVSS scores are provided in the advisory. The vulnerabilities have been fixed in the updated packages provided by Red Hat.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9. These include JavaScript execution via spoofed PDF attachments and file:/// links, sender spoofing through malformed From headers, unsolicited file downloads causing disk space exhaustion and credential leakage via mailbox:/// links, and tracking links in attachments bypassing remote content blocking. Red Hat has issued an important security advisory with updates to address these issues.

Multiple security vulnerabilities have been identified in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 10. These include JavaScript execution via spoofed PDF attachments and file:/// links, sender spoofing through malformed From headers, unsolicited file downloads causing disk space exhaustion and credential leakage via mailbox:/// links, and tracking links in attachments bypassing remote content blocking. Red Hat has issued an important security advisory with updates addressing these issues.