Code injection

2010-03-2300:53:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.065 Low

EPSS

Percentile

93.5%

JSON

Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.

CPENameOperatorVersion
seamonkeyeq1.1.10
seamonkeyeq1.0.3
seamonkeyeq1.1.8
seamonkeyeq1.0.1
seamonkeyeq1.1.7
seamonkeyeq1.0.6
seamonkeyeq1.0.9
seamonkeyeq1.1.3
seamonkeyeq1.0
seamonkeyeq1.1.17

Name	Operator	Version
seamonkey	eq	1.1.10
seamonkey	eq	1.0.3
seamonkey	eq	1.1.8
seamonkey	eq	1.0.1
seamonkey	eq	1.1.7
seamonkey	eq	1.0.6
seamonkey	eq	1.0.9
seamonkey	eq	1.1.3
seamonkey	eq	1.0
seamonkey	eq	1.1.17