NetSight
medium4.3

CVE-2010-0163

Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, …

Impact

Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.

Affected products

VendorProductAffected versions
MozillaThunderbird
through 2.0.0.23
Versions 0.1, 0.2, 0.3, 0.4, 0.5
MozillaSeamonkey
through 1.1.18
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

References