PT-2008-1945 · Mozilla+1 · Seamonkey+2

Regenrecht · Publicado 2008-02-08 · Atualizado 2017-09-29 · CVE-2008-0304

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Thunderbird versions prior to 2.0.0.12 SeaMonkey versions prior to 1.1.8

Description A heap-based buffer overflow issue might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message. This issue is related to an incorrect memory allocation during message preview.

Recommendations For Mozilla Thunderbird versions prior to 2.0.0.12, update to version 2.0.0.12 or later. For SeaMonkey versions prior to 1.1.8, update to version 1.1.8 or later.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-0304

DSA-1621-1

DSA-1697-1

RHSA-2008:0104

RHSA-2008:0105

RHSA-2008_0104

RHSA-2008_0105

Produtos afetados

Thunderbird

Red Hat

Seamonkey

Referências · 42

• http://secunia.com/advisories/29098 · Nota
• https://access.redhat.com/security/cve/CVE-2008-0416 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=668 · Nota
• https://access.redhat.com/security/cve/CVE-2008-0418 · Nota
• https://access.redhat.com/security/cve/CVE-2008-0420 · Nota
• http://mozilla.org/security/announce/2008/mfsa2008-12.html · Nota
• http://lcamtuf.coredump.cx/ffclick2 · Nota
• http://vupen.com/english/advisories/2008/2091/references · Nota
• https://access.redhat.com/errata/RHSA-2008:0104 · Nota
• https://redhat.com/archives/fedora-package-announce/2008-February/msg00946.html · Aviso do Fabricante
• http://secunia.com/advisories/29167 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2008:062 · Aviso do Fabricante
• http://secunia.com/advisories/31043 · Nota
• http://securityfocus.com/bid/28012 · Correção
• http://ubuntu.com/usn/usn-582-2 · Aviso do Fabricante