Skip to content
OpenAdvisories
Unscored CVE-2010-0163 EUVD-2010-0194GHSA-c9pm-wqw2-p2v7

Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termi…

Published Mar 22, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 5.0 icedove 2.0.0.24-0lenny1 DSA-2025-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 5 thunderbird 2.0.0.24-2.el5_4 RHSA-2010:0153
RHEL 4 seamonkey +5 1.0.9-58.el4_8 RHSA-2010:0499
RHEL 4 thunderbird 1.5.0.12-25.el4 RHSA-2010:0154
RHEL 3 seamonkey +9 1.0.9-0.55.el3 RHSA-2010:0499
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat Rhel Productivity 5 thunderbird 2.0.0.24-2.el5_4 RHSA-2010:0153

Advisories 4

References