PT-2006-7109 · Mozilla+1 · Seamonkey+2

David Bienvenu + 1 · Published 2006-12-19 · Updated 2018-10-17 · CVE-2006-6505

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Thunderbird versions prior to 1.5.0.9 SeaMonkey versions prior to 1.0.7

Description The issue is related to multiple heap-based buffer overflows that can be triggered by remote attackers. This can be achieved through external message modes with long Content-Type headers or long RFC2047-encoded (MIME non-ASCII) headers, potentially allowing the execution of arbitrary code.

Recommendations For Mozilla Thunderbird versions prior to 1.5.0.9, update to version 1.5.0.9 or later. For SeaMonkey versions prior to 1.0.7, update to version 1.0.7 or later.

Fix

Related Identifiers

CVE-2006-6505

DSA-1265-1

RHSA-2006:0759

RHSA-2006:0760

RHSA-2006_0759

RHSA-2006_0760

Affected Products

Thunderbird

Red Hat

Seamonkey

References · 51

• http://mandriva.com/security/advisories?name=MDKSA-2007:011 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200701-04.xml · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_06_mozilla.html · Vendor Advisory
• http://debian.org/security/2007/dsa-1265 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6505 · Security Note
• http://ubuntu.com/usn/usn-400-1 · Vendor Advisory
• http://fedoranews.org/cms/node/2338 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200701-03.xml · Vendor Advisory
• http://fedoranews.org/cms/node/2297 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2006-0759.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_80_mozilla.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2006-0760.html · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102800-1 · Vendor Advisory
• http://secunia.com/advisories/23439 · Note