NetSight
critical9.3

CVE-2009-2210

Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arb…

Impact

Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.

Affected products

VendorProductAffected versions
MozillaSeamonkey
through 1.1.16
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4
MozillaThunderbird
through 2.0.0.21
Versions 0.1, 0.2, 0.3, 0.4, 0.5

References