PT-2006-7109 · Mozilla+1 · Seamonkey+2

David Bienvenu + 1 · Publicado 2006-12-19 · Atualizado 2018-10-17 · CVE-2006-6505

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Thunderbird versions prior to 1.5.0.9 SeaMonkey versions prior to 1.0.7

Description The issue is related to multiple heap-based buffer overflows that can be triggered by remote attackers. This can be achieved through external message modes with long Content-Type headers or long RFC2047-encoded (MIME non-ASCII) headers, potentially allowing the execution of arbitrary code.

Recommendations For Mozilla Thunderbird versions prior to 1.5.0.9, update to version 1.5.0.9 or later. For SeaMonkey versions prior to 1.0.7, update to version 1.0.7 or later.

Correção

Identificadores relacionados

CVE-2006-6505

DSA-1265-1

RHSA-2006:0759

RHSA-2006:0760

RHSA-2006_0759

RHSA-2006_0760

Produtos afetados

Thunderbird

Red Hat

Seamonkey

Referências · 51

• http://secunia.com/advisories/23439 · Nota
• http://securitytracker.com/id?1017419 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2007:011 · Aviso do Fabricante
• http://secunia.com/advisories/23468 · Nota
• http://gentoo.org/security/en/glsa/glsa-200701-04.xml · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-6505 · Nota
• http://novell.com/linux/security/advisories/2007_06_mozilla.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/0573 · Nota
• http://secunia.com/advisories/23618 · Nota
• https://access.redhat.com/errata/RHSA-2006:0760 · Nota
• http://debian.org/security/2007/dsa-1265 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2006-6501 · Nota
• http://secunia.com/advisories/23514 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6505 · Nota de Segurança
• http://secunia.com/advisories/24390 · Nota