Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2010-0163

Published: 23/03/2010 Updated: 19/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Subscribe to Thunderbird

Vulnerability Summary

Mozilla Thunderbird prior to 2.0.0.24 and SeaMonkey prior to 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.
Vulnerable Product Search on Vulmon Subscribe to Product

mozilla thunderbird 2.0.0.19

mozilla thunderbird 2.0.0.18

mozilla thunderbird 2.0.0.7

mozilla thunderbird 2.0.0.6

mozilla thunderbird 1.5.0.12

mozilla thunderbird 1.5.0.5

mozilla thunderbird 1.5.0.4

mozilla thunderbird 1.5.0.6

mozilla thunderbird 1.5.0.2

mozilla thunderbird 1.5

mozilla thunderbird 1.0.1

mozilla thunderbird 1.0

mozilla thunderbird 0.1

mozilla thunderbird 0.2

mozilla thunderbird 2.0.0.22

mozilla thunderbird 2.0.0.21

mozilla thunderbird 2.0.0.9

mozilla thunderbird 2.0.0.8

mozilla thunderbird 2.0.0.1

mozilla thunderbird 2.0.0.0

mozilla thunderbird 2.0

mozilla thunderbird 1.5.0.3

mozilla thunderbird 1.5.0.14

mozilla thunderbird 1.5.0.11

mozilla thunderbird 1.0.3

mozilla thunderbird 1.0.2

mozilla thunderbird 0.7

mozilla thunderbird 0.7.1

mozilla thunderbird

mozilla thunderbird 2.0.0.14

mozilla thunderbird 2.0.0.12

mozilla thunderbird 2.0.0.3

mozilla thunderbird 2.0.0.2

mozilla thunderbird 1.5.2

mozilla thunderbird 1.5.1

mozilla thunderbird 1.5.0.13

mozilla thunderbird 1.5.0.10

mozilla thunderbird 1.0.6

mozilla thunderbird 1.0.5

mozilla thunderbird 1.0.4

mozilla thunderbird 0.7.2

mozilla thunderbird 0.7.3

mozilla thunderbird 0.3

mozilla thunderbird 0.4

mozilla thunderbird 2.0.0.17

mozilla thunderbird 2.0.0.16

mozilla thunderbird 2.0.0.5

mozilla thunderbird 2.0.0.4

mozilla thunderbird 1.5.0.9

mozilla thunderbird 1.5.0.8

mozilla thunderbird 1.5.0.7

mozilla thunderbird 1.5.0.1

mozilla thunderbird 1.0.8

mozilla thunderbird 1.0.7

mozilla thunderbird 0.9

mozilla thunderbird 0.8

mozilla thunderbird 0.5

mozilla thunderbird 0.6

mozilla seamonkey 1.1.17

mozilla seamonkey 1.1.16

mozilla seamonkey 1.1.8

mozilla seamonkey 1.1.7

mozilla seamonkey 1.1

mozilla seamonkey 1.0.4

mozilla seamonkey 1.0.3

mozilla seamonkey 1.0.2

mozilla seamonkey

mozilla seamonkey 1.1.10

mozilla seamonkey 1.1.9

mozilla seamonkey 1.1.2

mozilla seamonkey 1.1.1

mozilla seamonkey 1.0.6

mozilla seamonkey 1.0.5

mozilla seamonkey 1.1.12

mozilla seamonkey 1.1.11

mozilla seamonkey 1.1.4

mozilla seamonkey 1.1.3

mozilla seamonkey 1.0.8

mozilla seamonkey 1.0.7

mozilla seamonkey 1.0

mozilla seamonkey 1.1.15

mozilla seamonkey 1.1.14

mozilla seamonkey 1.1.13

mozilla seamonkey 1.1.6

mozilla seamonkey 1.1.5

mozilla seamonkey 1.0.9

mozilla seamonkey 1.0.1

Vendor Advisories

Debian Security Advisories: DSA-2025-1 icedove -- several vulnerabilities
Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-2408 Dan Kaminsky and Moxie Marlinspike discovered that icedove does not properly handle a '\0' character in a domain name ...
Ubuntu Security Notice: thunderbird vulnerabilities
Several flaws were discovered in the JavaScript engine of Thunderbird If a user had JavaScript enabled and were tricked into viewing malicious web content, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program (CVE-2009-0689, CVE-2009-2463, CVE-2009-3075) ...
Mozilla: Fixes for potentially exploitable crashes ported to the legacy branch
Mozilla Foundation Security Advisory 2010-07 Fixes for potentially exploitable crashes ported to the legacy branch Announced March 16, 2010 Reporter Mozilla developers and community Impact Critical Products SeaMonkey, Thunder ...
Mozilla: Mozilla Foundation Security Advisory 2010-07
Fixes for potentially exploitable crashes ported to the legacy branch Announced March 16, 2010 Reporter Mozilla developers and community Impact Critical Products SeaMonkey, Thunderbird Fixed in ...
Red Hat: Moderate: thunderbird security update
Synopsis Moderate: thunderbird security update Type/Severity Security Advisory: Moderate Topic An updated thunderbird package that fixes several security issues is nowavailable for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common V ...
Red Hat: Moderate: thunderbird security update
Synopsis Moderate: thunderbird security update Type/Severity Security Advisory: Moderate Topic An updated thunderbird package that fixes several security issues is nowavailable for Red Hat Enterprise Linux 4The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common V ...

References

NVD-CWE-Otherhttp://www.vupen.com/english/advisories/2010/0648http://www.mozilla.org/security/announce/2010/mfsa2010-07.htmlhttp://secunia.com/advisories/39001https://bugzilla.mozilla.org/show_bug.cgi?id=505221http://www.securityfocus.com/bid/38831http://www.ubuntu.com/usn/USN-915-1http://secunia.com/advisories/38977http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlhttp://www.vupen.com/english/advisories/2010/1556http://www.redhat.com/support/errata/RHSA-2010-0499.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/56993https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14259https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10805https://nvd.nist.govhttps://www.securityfocus.com/bid/38831https://www.debian.org/security/./dsa-2025https://usn.ubuntu.com/915-1/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-26498open redirectCVE-2023-22261CVE-2023-1410path traversalCVE-2023-28759cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook