Product: Solaris 10 Operating System OpenSolarisSecurity vulnerabilities in thunderbird(1) related to handling of SSL server certificates may allow remote SSL servers with crafted server certificates to compromise an encrypted communication or cause arbitrary code execution with the privileges of a Thunderbird user. The following Mozilla advisories describe the vulnerabilities:http://www.mozilla.org/security/announce/2009/mfsa2009-42.html http://www.mozilla.org/security/announce/2009/mfsa2009-43.html Additional references: CVE-2009-2404 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2404 CVE-2009-2408 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2408 State: PreliminaryFirst released: 09-Oct-2009Sun Alert Link: http://sunsolve.sun.com/search/document.do?assetkey=1-66-269468-1
Product: Solaris 10 Operating System OpenSolaris
Security vulnerabilities in thunderbird(1) related to handling of SSL server certificates
may allow remote SSL servers with crafted server certificates to compromise an encrypted
communication or cause arbitrary code execution with the privileges of a Thunderbird user.
The following Mozilla advisories describe the vulnerabilities:
http://www.mozilla.org/security/announce/2009/mfsa2009-42.html
http://www.mozilla.org/security/announce/2009/mfsa2009-43.html
Additional references:
CVE-2009-2404 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2404
CVE-2009-2408 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2408
State: Preliminary
First released: 09-Oct-2009
