CVE-2010-3182 Affecting thunderbird package, versions <0:2.0.0.24-9.el5


Severity

Recommended
0.0
medium
0
10

Based on Red Hat Enterprise Linux security rating.

Threat Intelligence

EPSS
0.06% (19th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL10-THUNDERBIRD-9869814
  • published28 Apr 2025
  • disclosed19 Oct 2010

Introduced: 19 Oct 2010

CVE-2010-3182  (opens in a new tab)

How to fix?

Upgrade RHEL:10 thunderbird to version 0:2.0.0.24-9.el5 or higher.
This issue was patched in RHSA-2010:0780.

NVD Description

Note: Versions mentioned in the description apply only to the upstream thunderbird package and not the thunderbird package as distributed by RHEL. See How to fix? for RHEL:10 relevant fixed versions and status.

A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

CVSS Base Scores

version 3.1