Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-develUpgrade seamonkey-nspr-develUpgrade seamonkey-js-debuggerUpgrade seamonkeyUpgrade seamonkey-nssUpgrade seamonkey-nss-develUpgrade seamonkey-dom-inspectorUpgrade thunderbirdUpgrade seamonkey-chatUpgrade seamonkey-mailUpgrade seamonkey-nspr | Dec 1, 2016 | Jun 25, 2009 |
| Gentoo Linux | — | Upgrade www-client/seamonkey-bin.Upgrade www-client/firefox-bin.Upgrade www-client/mozilla-firefox-bin.Upgrade mail-client/thunderbird.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/thunderbird-bin.Upgrade net-libs/xulrunner-bin.Upgrade net-libs/xulrunner.Upgrade dev-libs/nss.Upgrade www-client/icecat.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla-firefox. | Oct 30, 2017 | Jun 25, 2009 |
| Suse | — | Upgrade mozillaUpgrade mozilla-mailUpgrade seamonkey-ircUpgrade mozilla-ircUpgrade mozilla-venkmanUpgrade mozilla-dom-inspectorUpgrade seamonkey-venkmanUpgrade mozilla-develUpgrade seamonkeyUpgrade seamonkey-spellcheckerUpgrade seamonkey-mailUpgrade seamonkey-dom-inspector | Dec 12, 2013 | Jun 25, 2009 |
| Ubuntu | — | Upgrade seamonkeyUpgrade thunderbird | Nov 19, 2024 | Jun 25, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub