Published: 23/03/2010 Updated: 19/09/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Mozilla Thunderbird prior to 2.0.0.24 and SeaMonkey prior to 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla thunderbird 2.0.0.19
mozilla thunderbird 2.0.0.18
mozilla thunderbird 2.0.0.7
mozilla thunderbird 2.0.0.6
mozilla thunderbird 1.5.0.12
mozilla thunderbird 1.5.0.5
mozilla thunderbird 1.5.0.4
mozilla thunderbird 1.5.0.6
mozilla thunderbird 1.5.0.2
mozilla thunderbird 1.5
mozilla thunderbird 1.0.1
mozilla thunderbird 1.0
mozilla thunderbird 0.1
mozilla thunderbird 0.2
mozilla thunderbird 2.0.0.22
mozilla thunderbird 2.0.0.21
mozilla thunderbird 2.0.0.9
mozilla thunderbird 2.0.0.8
mozilla thunderbird 2.0.0.1
mozilla thunderbird 2.0.0.0
mozilla thunderbird 2.0
mozilla thunderbird 1.5.0.3
mozilla thunderbird 1.5.0.14
mozilla thunderbird 1.5.0.11
mozilla thunderbird 1.0.3
mozilla thunderbird 1.0.2
mozilla thunderbird 0.7
mozilla thunderbird 0.7.1
mozilla thunderbird
mozilla thunderbird 2.0.0.14
mozilla thunderbird 2.0.0.12
mozilla thunderbird 2.0.0.3
mozilla thunderbird 2.0.0.2
mozilla thunderbird 1.5.2
mozilla thunderbird 1.5.1
mozilla thunderbird 1.5.0.13
mozilla thunderbird 1.5.0.10
mozilla thunderbird 1.0.6
mozilla thunderbird 1.0.5
mozilla thunderbird 1.0.4
mozilla thunderbird 0.7.2
mozilla thunderbird 0.7.3
mozilla thunderbird 0.3
mozilla thunderbird 0.4
mozilla thunderbird 2.0.0.17
mozilla thunderbird 2.0.0.16
mozilla thunderbird 2.0.0.5
mozilla thunderbird 2.0.0.4
mozilla thunderbird 1.5.0.9
mozilla thunderbird 1.5.0.8
mozilla thunderbird 1.5.0.7
mozilla thunderbird 1.5.0.1
mozilla thunderbird 1.0.8
mozilla thunderbird 1.0.7
mozilla thunderbird 0.9
mozilla thunderbird 0.8
mozilla thunderbird 0.5
mozilla thunderbird 0.6
mozilla seamonkey 1.1.17
mozilla seamonkey 1.1.16
mozilla seamonkey 1.1.8
mozilla seamonkey 1.1.7
mozilla seamonkey 1.1
mozilla seamonkey 1.0.4
mozilla seamonkey 1.0.3
mozilla seamonkey 1.0.2
mozilla seamonkey
mozilla seamonkey 1.1.10
mozilla seamonkey 1.1.9
mozilla seamonkey 1.1.2
mozilla seamonkey 1.1.1
mozilla seamonkey 1.0.6
mozilla seamonkey 1.0.5
mozilla seamonkey 1.1.12
mozilla seamonkey 1.1.11
mozilla seamonkey 1.1.4
mozilla seamonkey 1.1.3
mozilla seamonkey 1.0.8
mozilla seamonkey 1.0.7
mozilla seamonkey 1.0
mozilla seamonkey 1.1.15
mozilla seamonkey 1.1.14
mozilla seamonkey 1.1.13
mozilla seamonkey 1.1.6
mozilla seamonkey 1.1.5
mozilla seamonkey 1.0.9
mozilla seamonkey 1.0.1

Several flaws were discovered in the JavaScript engine of Thunderbird If a user had JavaScript enabled and were tricked into viewing malicious web content, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program (CVE-2009-0689, CVE-2009-2463, CVE-2009-3075) ...

Synopsis Moderate: thunderbird security update Type/Severity Security Advisory: Moderate Topic An updated thunderbird package that fixes several security issues is nowavailable for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common V ...

Synopsis Moderate: thunderbird security update Type/Severity Security Advisory: Moderate Topic An updated thunderbird package that fixes several security issues is nowavailable for Red Hat Enterprise Linux 4The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common V ...

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-2408 Dan Kaminsky and Moxie Marlinspike discovered that icedove does not properly handle a '\0' character in a domain name ...

Mozilla Foundation Security Advisory 2010-07 Fixes for potentially exploitable crashes ported to the legacy branch Announced March 16, 2010 Reporter Mozilla developers and community Impact Critical Products SeaMonkey, Thunder ...

NVD-CWE-Other http://www.vupen.com/english/advisories/2010/0648 http://www.mozilla.org/security/announce/2010/mfsa2010-07.html http://secunia.com/advisories/39001 https://bugzilla.mozilla.org/show_bug.cgi?id=505221 http://www.securityfocus.com/bid/38831 http://www.ubuntu.com/usn/USN-915-1 http://secunia.com/advisories/38977 http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html http://www.vupen.com/english/advisories/2010/1556 http://www.redhat.com/support/errata/RHSA-2010-0499.html https://exchange.xforce.ibmcloud.com/vulnerabilities/56993 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14259 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10805 https://usn.ubuntu.com/915-1/https://nvd.nist.gov

Get Started

CVE-2010-0163

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect