PT-2006-3700 · Mozilla+1 · Thunderbird+2

Masatoshi Kimura

·

Publicado

2006-06-02

·

Atualizado

2018-10-18

·

CVE-2006-2781

CVSS v2.0

6.4

Média

VetorAV:N/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions Mozilla Thunderbird versions prior to 1.5.0.4 SeaMonkey versions prior to 1.0.2
Description A double free issue exists in the nsVCard.cpp component, allowing remote attackers to potentially cause a denial of service or execute arbitrary code by sending a VCard with invalid base64 characters.
Recommendations For Mozilla Thunderbird versions prior to 1.5.0.4, update to version 1.5.0.4 or later. For SeaMonkey versions prior to 1.0.2, update to version 1.0.2 or later.

Exploit

Correção

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-2781
DSA-1118
DSA-1134-1
RHSA-2006:0578
RHSA-2006:0609
RHSA-2006:0611
RHSA-2006_0609
RHSA-2006_0611

Produtos afetados

Thunderbird
Red Hat
Seamonkey