CVE-2009-2210

2009-06-2517:30:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2009-2210

mozilla thunderbird

seamonkey

denial of service

remote code execution

email security

9.6 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.092 Low

EPSS

Percentile

94.6%

JSON

Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.

CPENameOperatorVersion
mozilla:seamonkeymozilla seamonkeyeq1.1.10
mozilla:thunderbirdmozilla thunderbirdeq1.5.0.7
mozilla:thunderbirdmozilla thunderbirdeq0.6
mozilla:seamonkeymozilla seamonkeyeq1.0.3
mozilla:thunderbirdmozilla thunderbirdeq0.7.2
mozilla:thunderbirdmozilla thunderbirdeq2.0.0.4
mozilla:seamonkeymozilla seamonkeyeq1.1.8
mozilla:seamonkeymozilla seamonkeyle1.1.16
mozilla:thunderbirdmozilla thunderbirdle2.0.0.21
mozilla:seamonkeymozilla seamonkeyeq1.0.1

CPE	Name	Operator	Version
mozilla:seamonkey	mozilla seamonkey	eq	1.1.10
mozilla:thunderbird	mozilla thunderbird	eq	1.5.0.7
mozilla:thunderbird	mozilla thunderbird	eq	0.6
mozilla:seamonkey	mozilla seamonkey	eq	1.0.3
mozilla:thunderbird	mozilla thunderbird	eq	0.7.2
mozilla:thunderbird	mozilla thunderbird	eq	2.0.0.4
mozilla:seamonkey	mozilla seamonkey	eq	1.1.8
mozilla:seamonkey	mozilla seamonkey	le	1.1.16
mozilla:thunderbird	mozilla thunderbird	le	2.0.0.21
mozilla:seamonkey	mozilla seamonkey	eq	1.0.1