CVE-2009-2210

Severity

93%

Complexity

86%

Confidentiality

165%

Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.

Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

Type

Mozilla

First reported 15 years ago

2009-06-25 17:30:00

Last updated 6 years ago

2018-10-30 16:25:00

Affected Software

Mozilla SeaMonkey 1.0

1.0

Mozilla SeaMonkey 1.0 alpha

1.0

Mozilla SeaMonkey 1.0 beta

1.0

Mozilla SeaMonkey 1.0.1

1.0.1

Mozilla SeaMonkey 1.0.2

1.0.2

Mozilla SeaMonkey 1.0.3

1.0.3

Mozilla SeaMonkey 1.0.4

1.0.4

Mozilla SeaMonkey 1.0.5

1.0.5

Mozilla SeaMonkey 1.0.6

1.0.6

Mozilla SeaMonkey 1.0.7

1.0.7

Mozilla SeaMonkey 1.0.8

1.0.8

Mozilla SeaMonkey 1.0.9

1.0.9

Mozilla SeaMonkey 1.1

1.1

Mozilla SeaMonkey 1.1 alpha

1.1

Mozilla SeaMonkey 1.1 beta

1.1

Mozilla Seamonkey 1.1.1

1.1.1

Mozilla Seamonkey 1.1.2

1.1.2

Mozilla Seamonkey 1.1.3

1.1.3

Mozilla Seamonkey 1.1.4

1.1.4

Mozilla Seamonkey 1.1.5

1.1.5

Mozilla Seamonkey 1.1.6

1.1.6

Mozilla Seamonkey 1.1.7

1.1.7

Mozilla SeaMonkey 1.1.8

1.1.8

Mozilla SeaMonkey 1.1.9

1.1.9

Mozilla SeaMonkey 1.1.10

1.1.10

Mozilla SeaMonkey 1.1.11

1.1.11

Mozilla SeaMonkey 1.1.12

1.1.12

Mozilla SeaMonkey 1.1.13

1.1.13

Mozilla SeaMonkey 1.1.14

1.1.14

Mozilla SeaMonkey 1.1.15

1.1.15

Mozilla SeaMonkey

Mozilla SeaMonkey 1.5.0.8

1.5.0.8

Mozilla SeaMonkey 1.5.0.9

1.5.0.9

Mozilla SeaMonkey 1.5.0.10

1.5.0.10

Mozilla Thunderbird 0.1

0.1

Mozilla Thunderbird 0.2

0.2

Mozilla Thunderbird 0.3

0.3

Mozilla Thunderbird 0.4

0.4

Mozilla Thunderbird 0.5

0.5

Mozilla Thunderbird 0.6

0.6

Mozilla Thunderbird 0.7

0.7

Mozilla Thunderbird 0.7.1

0.7.1

Mozilla Thunderbird 0.7.2

0.7.2

Mozilla Thunderbird 0.7.3

0.7.3

Mozilla Thunderbird 0.8

0.8

Mozilla Thunderbird 0.9

0.9

Mozilla Thunderbird 1.0

1.0

Mozilla Thunderbird 1.0.2

1.0.2

Mozilla Thunderbird 1.0.5

1.0.5

Mozilla Thunderbird 1.0.6

1.0.6

Mozilla Thunderbird 1.0.7

1.0.7

Mozilla Thunderbird 1.0.8

1.0.8

Mozilla Thunderbird 1.5

1.5

Mozilla Thunderbird 1.5 Beta 2

1.5

Mozilla Thunderbird 1.5.0.2

1.5.0.2

Mozilla Thunderbird 1.5.0.4

1.5.0.4

Mozilla Thunderbird 1.5.0.5

1.5.0.5

Mozilla Thunderbird 1.5.0.7

1.5.0.7

Mozilla Thunderbird 1.5.0.8

1.5.0.8

Mozilla Thunderbird 1.5.0.9

1.5.0.9

Mozilla Thunderbird 1.5.0.10

1.5.0.10

Mozilla Thunderbird 1.5.0.12

1.5.0.12

Mozilla Thunderbird 1.5.0.13

1.5.0.13

Mozilla Thunderbird 1.5.0.14

1.5.0.14

Mozilla Thunderbird 2.0.0.0

2.0.0.0

Mozilla Thunderbird 2.0.0.4

2.0.0.4

Mozilla Thunderbird 2.0.0.5

2.0.0.5

Mozilla Thunderbird 2.0.0.6

2.0.0.6

Mozilla Thunderbird 2.0.0.9

2.0.0.9

Mozilla Thunderbird 2.0.0.12

2.0.0.12

Mozilla Thunderbird 2.0.0.14

2.0.0.14

Mozilla Thunderbird 2.0.0.16

2.0.0.16

Mozilla Thunderbird 2.0.0.17

2.0.0.17

Mozilla Thunderbird 2.0.0.18

2.0.0.18

Mozilla Thunderbird 2.0.0.19

2.0.0.19

Mozilla Thunderbird

References

35561

35602

35633

35882

1022433

SSA:2009-176-01

DSA-1830

MDVSA-2009:141

http://www.mozilla.org/security/announce/2009/mfsa2009-33.html

Patch, Vendor Advisory

RHSA-2009:1134

35461

Patch

SSA:2009-178-01

https://bugzilla.mozilla.org/show_bug.cgi?id=495057

mozilla-multipart-alternative-code-exec(51315)

oval:org.mitre.oval:def:9994

FEDORA-2009-7567

FEDORA-2009-7614

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.