Arbitrary Code Execution

2020-04-1000:56:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

JSON

thunderbird is vulnerable to arbitrary code execution. The vulnerability exists through as a HTML mail message containing malicious content could possibly lead to arbitrary code execution with the privileges of the user running Thunderbird.

CPENameOperatorVersion
thunderbirdeq3.1.8__4.el6_0
thunderbirdeq3.1.3__1.el6
thunderbirdeq3.1.9__3.el6_0
thunderbirdeq3.1.7__3.el6_0
thunderbirdeq3.1.6__1.el6_0
xulrunnereq1.9.2.11__2.el5
xulrunnereq1.9.2.4__9.el5
xulrunnereq1.9.0.4__1.el5
xulrunnereq1.9.0.5__1.el5_2
xulrunnereq1.9.2.14__3.el6_0

Name	Operator	Version
thunderbird	eq	3.1.8__4.el6_0
thunderbird	eq	3.1.3__1.el6
thunderbird	eq	3.1.9__3.el6_0
thunderbird	eq	3.1.7__3.el6_0
thunderbird	eq	3.1.6__1.el6_0
xulrunner	eq	1.9.2.11__2.el5
xulrunner	eq	1.9.2.4__9.el5
xulrunner	eq	1.9.0.4__1.el5
xulrunner	eq	1.9.0.5__1.el5_2
xulrunner	eq	1.9.2.14__3.el6_0