PT-2010-1977 · Mozilla+1 · Seamonkey+2

Published 2010-03-17 · Updated 2017-09-19 · CVE-2010-0163

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mozilla Thunderbird versions prior to 2.0.0.24 SeaMonkey versions prior to 1.1.19

Description The issue is related to the processing of e-mail attachments, where the parser incorrectly performs casts and line termination, allowing remote attackers to cause a denial of service, potentially leading to application crashes, or possibly execute arbitrary code via a crafted message. This is related to message indexing.

Recommendations For Mozilla Thunderbird versions prior to 2.0.0.24, update to version 2.0.0.24 or later to resolve the issue. For SeaMonkey versions prior to 1.1.19, update to version 1.1.19 or later to resolve the issue.

Fix

Related Identifiers

CVE-2010-0163

DSA-2025-1

RHSA-2010:0153

RHSA-2010:0154

RHSA-2010:0499

RHSA-2010_0153

RHSA-2010_0154

RHSA-2010_0499

Affected Products

Thunderbird

Red Hat

Seamonkey

References · 57

• http://vupen.com/english/advisories/2010/0648 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01739 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02611 · Security Note
• https://bdu.fstec.ru/vul/2015-02141 · Security Note
• http://redhat.com/support/errata/RHSA-2010-0499.html · Vendor Advisory
• http://secunia.com/advisories/39001 · Vendor Advisory
• http://mozilla.org/security/announce/2010/mfsa2010-07.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02144 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-0163 · Security Note
• https://bdu.fstec.ru/vul/2015-02145 · Security Note
• https://bdu.fstec.ru/vul/2015-02610 · Security Note
• https://bdu.fstec.ru/vul/2015-02142 · Security Note
• https://bdu.fstec.ru/vul/2015-02140 · Security Note
• http://ubuntu.com/usn/USN-915-1 · Vendor Advisory