PT-2010-1975 · Mozilla · Seamonkey+1

Paul Fisher · Publicado 2010-03-22 · Atualizado 2017-09-19 · CVE-2010-0161

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Thunderbird versions prior to 2.0.0.24 SeaMonkey versions prior to 1.1.19

Description The issue allows remote SMTP, IMAP, and POP servers to cause a denial of service or possibly execute arbitrary code via crafted data in a session that uses SSPI, resulting in heap memory corruption and application crash.

Recommendations For Mozilla Thunderbird versions prior to 2.0.0.24, update to version 2.0.0.24 or later. For SeaMonkey versions prior to 1.1.19, update to version 1.1.19 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2010-0161

Produtos afetados

Thunderbird

Seamonkey

Referências · 9

• http://vupen.com/english/advisories/2010/0648 · Aviso do Fabricante
• http://secunia.com/advisories/39001 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14159 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=511806 · Correção
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html · Aviso do Fabricante
• http://mozilla.org/security/announce/2010/mfsa2010-07.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56992 · Nota
• http://securityfocus.com/bid/38831 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0161 · Nota de Segurança