MozillaThunderbird MozillaThunderbird: Security fixes from 2.0.0.16 MozillaThunderbird: Securityfixes von 2.0.0.16 This patch backports security fixes found in MozillaThunderbird 2.0.0.16 back to the 1.5 Thunderbird used in openSUSE 10.2. MFSA 2008-34 / CVE-2008-2785: An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla CSS reference counting code. The vulnerability was caused by an insufficiently sized variable being used as a reference counter for CSS objects. By creating a very large number of references to a common CSS object, this counter could be overflowed which could cause a crash when the browser attempts to free the CSS object while still in use. An attacker could use this crash to run arbitrary code on the victim's computer This patch backports security fixes found in MozillaThunderbird 2.0.0.16 back to the 1.5 Thunderbird used in openSUSE 10.2. MFSA 2008-34 / CVE-2008-2785: An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla CSS reference counting code. The vulnerability was caused by an insufficiently sized variable being used as a reference counter for CSS objects. By creating a very large number of references to a common CSS object, this counter could be overflowed which could cause a crash when the browser attempts to free the CSS object while still in use. An attacker could use this crash to run arbitrary code on the victim's computer security MozillaThunderbird i586 c8cca06f383cefe42e2f538020f305a259753db0 MozillaThunderbird ppc 6786af50f31398a0d4fa0fe04faacfff317c081e MozillaThunderbird x86_64 dbae5620eaa6d33cf12026a8a31facb4c3403d9b MozillaThunderbird-translations i586 2200445bfbdbe7149249e137112562e2f502ded1 MozillaThunderbird-translations ppc 91b880ac5193a07aa03cfc5b6f589e964bebca86 MozillaThunderbird-translations x86_64 a137e5af849709531a76b650a926e23fa2fed320