PT-2007-2699 · Mozilla+1 · Thunderbird+2

Published 2007-02-24 · Updated 2017-10-11 · CVE-2007-1282

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Thunderbird versions prior to 1.5.0.10 SeaMonkey versions prior to 1.0.8

Description The issue allows remote attackers to trigger a buffer overflow and possibly execute arbitrary code via a text/enhanced or text/richtext e-mail message with an extremely long line.

Recommendations For Mozilla Thunderbird versions prior to 1.5.0.10, update to version 1.5.0.10 or later. For SeaMonkey versions prior to 1.0.8, update to version 1.0.8 or later.

Fix

Related Identifiers

CVE-2007-1282

DSA-1336-1

RHSA-2007:0077

RHSA-2007:0078

RHSA-2007:0108

RHSA-2007_0077

RHSA-2007_0078

RHSA-2007_0108

Affected Products

Thunderbird

Red Hat

Seamonkey

References · 49

• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc · Vendor Advisory
• http://fedoranews.org/cms/node/2747 · Vendor Advisory
• http://fedoranews.org/cms/node/2749 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0108.html · Vendor Advisory
• http://mozilla.org/security/announce/2007/mfsa2007-10.html · Patch
• http://security.gentoo.org/glsa/glsa-200703-18.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1282 · Security Note
• http://debian.org/security/2007/dsa-1336 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2006-6077 · Note
• http://secunia.com/advisories/25588 · Note
• https://access.redhat.com/security/cve/CVE-2007-0996 · Note
• http://vupen.com/english/advisories/2007/0824 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11313 · Note