PT-2007-2699 · Mozilla+1 · Thunderbird+2

Publicado 2007-02-24 · Atualizado 2017-10-11 · CVE-2007-1282

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Thunderbird versions prior to 1.5.0.10 SeaMonkey versions prior to 1.0.8

Description The issue allows remote attackers to trigger a buffer overflow and possibly execute arbitrary code via a text/enhanced or text/richtext e-mail message with an extremely long line.

Recommendations For Mozilla Thunderbird versions prior to 1.5.0.10, update to version 1.5.0.10 or later. For SeaMonkey versions prior to 1.0.8, update to version 1.0.8 or later.

Correção

Identificadores relacionados

CVE-2007-1282

DSA-1336-1

RHSA-2007:0077

RHSA-2007:0078

RHSA-2007:0108

RHSA-2007_0077

RHSA-2007_0078

RHSA-2007_0108

Produtos afetados

Thunderbird

Red Hat

Seamonkey

Referências · 49

• https://access.redhat.com/security/cve/CVE-2006-6077 · Nota
• http://secunia.com/advisories/25588 · Nota
• https://access.redhat.com/security/cve/CVE-2007-0996 · Nota
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/0824 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11313 · Nota
• http://secunia.com/advisories/24457 · Nota
• http://secunia.com/advisories/24406 · Nota
• https://access.redhat.com/errata/RHSA-2007:0108 · Nota
• http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=230733 · Nota
• http://info-svc.com/news/11-21-2006 · Nota
• https://access.redhat.com/security/cve/CVE-2007-0995 · Nota
• https://access.redhat.com/security/cve/CVE-2007-0009 · Nota
• http://fedoranews.org/cms/node/2747 · Aviso do Fabricante