Published: 06/03/2007 Updated: 11/10/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Integer overflow in Mozilla Thunderbird prior to 1.5.0.10 and SeaMonkey prior to 1.0.8 allows remote malicious users to trigger a buffer overflow and possibly execute arbitrary code via a text/enhanced or text/richtext e-mail message with an extremely long line.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla seamonkey 1.0.3
mozilla seamonkey 1.0.4
mozilla thunderbird 0.4
mozilla thunderbird 0.5
mozilla thunderbird 1.0
mozilla thunderbird 1.0.1
mozilla thunderbird 1.0.8
mozilla thunderbird 1.5
mozilla thunderbird 1.5.0.8
mozilla thunderbird 1.5.0.9
mozilla seamonkey 1.0.1
mozilla seamonkey 1.0.2
mozilla thunderbird 0.2
mozilla thunderbird 0.3
mozilla thunderbird 0.8
mozilla thunderbird 0.9
mozilla thunderbird 1.0.6
mozilla thunderbird 1.0.7
mozilla thunderbird 1.5.0.6
mozilla thunderbird 1.5.0.7
mozilla seamonkey 1.0.5
mozilla seamonkey 1.0.6
mozilla thunderbird 0.6
mozilla thunderbird 0.7
mozilla thunderbird 0.7.1
mozilla thunderbird 1.0.2
mozilla thunderbird 1.0.3
mozilla thunderbird 1.5.0.1
mozilla thunderbird 1.5.0.2
mozilla seamonkey 1.0
mozilla seamonkey 1.0.7
mozilla thunderbird 0.1
mozilla thunderbird 0.7.2
mozilla thunderbird 0.7.3
mozilla thunderbird 1.0.4
mozilla thunderbird 1.0.5
mozilla thunderbird 1.5.0.3
mozilla thunderbird 1.5.0.4

Several remote vulnerabilities have been discovered in Mozilla Firefox This will be the last security update of Mozilla-based products for the oldstable (sarge) distribution of Debian We recommend to upgrade to stable (etch) as soon as possible The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: CVE-2007-1 ...

NVD-CWE-Other http://www.redhat.com/support/errata/RHSA-2007-0078.html http://www.mozilla.org/security/announce/2007/mfsa2007-10.html https://bugzilla.mozilla.org/show_bug.cgi?id=362735 http://security.gentoo.org/glsa/glsa-200703-18.xml http://www.redhat.com/support/errata/RHSA-2007-0108.html http://www.securityfocus.com/bid/22845 http://secunia.com/advisories/24522 http://www.debian.org/security/2007/dsa-1336 http://fedoranews.org/cms/node/2747 http://fedoranews.org/cms/node/2749 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 http://secunia.com/advisories/24406 http://secunia.com/advisories/24456 http://secunia.com/advisories/24457 http://secunia.com/advisories/25588 http://osvdb.org/33810 ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc http://www.vupen.com/english/advisories/2007/0824 https://exchange.xforce.ibmcloud.com/vulnerabilities/32810 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11313 https://nvd.nist.gov https://www.debian.org/security/./dsa-1336

CVE-2007-1282

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect