Denial Of Service (DoS)

2020-04-1000:43:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

JSON

Mozilla Thunderbird is Denial of Service (DoS). It is possible because it processes e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.

CPENameOperatorVersion
thunderbirdeq2.0.0.18__1.el5
thunderbirdeq1.5.0.5__0.el4.2
thunderbirdeq1.5.0.9__0.1.el4
thunderbirdeq1.5.0.12__14.el4
thunderbirdeq1.5.0.5__0.el4.1
thunderbirdeq2.0.0.16__1.el5
thunderbirdeq1.5.0.8__0.1.el4
thunderbirdeq1.5.0.9__6.el5
thunderbirdeq1.5.0.7__0.1.el4
thunderbirdeq1.5.0.10__1.el5

Name	Operator	Version
thunderbird	eq	2.0.0.18__1.el5
thunderbird	eq	1.5.0.5__0.el4.2
thunderbird	eq	1.5.0.9__0.1.el4
thunderbird	eq	1.5.0.12__14.el4
thunderbird	eq	1.5.0.5__0.el4.1
thunderbird	eq	2.0.0.16__1.el5
thunderbird	eq	1.5.0.8__0.1.el4
thunderbird	eq	1.5.0.9__6.el5
thunderbird	eq	1.5.0.7__0.1.el4
thunderbird	eq	1.5.0.10__1.el5