MozillaThunderbird MozillaThunderbird: Security fixes from 2.0.0.17 MozillaThunderbird: Securityfixes von 2.0.0.17 This patch backports security fixes found in MozillaThunderbird 2.0.0.17 back to the 1.5 Thunderbird used in openSUSE 10.2. MFSA 2008-34 / CVE-2008-2785: An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla CSS reference counting code. The vulnerability was caused by an insufficiently sized variable being used as a reference counter for CSS objects. By creating a very large number of references to a common CSS object, this counter could be overflowed which could cause a crash when the browser attempts to free the CSS object while still in use. An attacker could use this crash to run arbitrary code on the victim's computer This patch backports security fixes found in MozillaThunderbird 2.0.0.17 back to the 1.5 Thunderbird used in openSUSE 10.2. MFSA 2008-34 / CVE-2008-2785: An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla CSS reference counting code. The vulnerability was caused by an insufficiently sized variable being used as a reference counter for CSS objects. By creating a very large number of references to a common CSS object, this counter could be overflowed which could cause a crash when the browser attempts to free the CSS object while still in use. An attacker could use this crash to run arbitrary code on the victim's computer security MozillaThunderbird i586 3e4930e9508b6a05d2a3a68960ead229ac43ba92 MozillaThunderbird ppc bf466d6b550dcd1c8d2c50a911db5d417532783f MozillaThunderbird x86_64 d44cc0b0e2bfd7cafbec281e128d9cd567d594d7 MozillaThunderbird-translations i586 e4d5ccc4f92f882c63ec97f4587ef580e8cb517b MozillaThunderbird-translations ppc fda96ef07273903ee243fed122b8fc750df158e7 MozillaThunderbird-translations x86_64 9a387b302cbd35fca777911832dc45cb7dcccefa