CVE-2009-2210

EUVD-2009-2206
Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
mozillaseamonkey
𝑥
≤ 1.1.16
mozillaseamonkey
1.0
mozillaseamonkey
1.0
mozillaseamonkey
1.0:alpha
mozillaseamonkey
1.0:beta
mozillaseamonkey
1.0.1
mozillaseamonkey
1.0.2
mozillaseamonkey
1.0.3
mozillaseamonkey
1.0.4
mozillaseamonkey
1.0.5
mozillaseamonkey
1.0.6
mozillaseamonkey
1.0.7
mozillaseamonkey
1.0.8
mozillaseamonkey
1.0.9
mozillaseamonkey
1.0.99
mozillaseamonkey
1.1
mozillaseamonkey
1.1:alpha
mozillaseamonkey
1.1:beta
mozillaseamonkey
1.1.1
mozillaseamonkey
1.1.2
mozillaseamonkey
1.1.3
mozillaseamonkey
1.1.4
mozillaseamonkey
1.1.5
mozillaseamonkey
1.1.5:1.1.10
mozillaseamonkey
1.1.6
mozillaseamonkey
1.1.7
mozillaseamonkey
1.1.8
mozillaseamonkey
1.1.9
mozillaseamonkey
1.1.10
mozillaseamonkey
1.1.11
mozillaseamonkey
1.1.12
mozillaseamonkey
1.1.13
mozillaseamonkey
1.1.14
mozillaseamonkey
1.1.15
mozillaseamonkey
1.5.0.8
mozillaseamonkey
1.5.0.9
mozillaseamonkey
1.5.0.10
mozillathunderbird
𝑥
≤ 2.0.0.21
mozillathunderbird
0.1
mozillathunderbird
0.2
mozillathunderbird
0.3
mozillathunderbird
0.4
mozillathunderbird
0.5
mozillathunderbird
0.6
mozillathunderbird
0.7
mozillathunderbird
0.7.1
mozillathunderbird
0.7.2
mozillathunderbird
0.7.3
mozillathunderbird
0.8
mozillathunderbird
0.9
mozillathunderbird
1.0
mozillathunderbird
1.0.1
mozillathunderbird
1.0.2
mozillathunderbird
1.0.3
mozillathunderbird
1.0.4
mozillathunderbird
1.0.5
mozillathunderbird
1.0.5:beta
mozillathunderbird
1.0.6
mozillathunderbird
1.0.7
mozillathunderbird
1.0.8
mozillathunderbird
1.5
mozillathunderbird
1.5:beta2
mozillathunderbird
1.5.0.1
mozillathunderbird
1.5.0.2
mozillathunderbird
1.5.0.3
mozillathunderbird
1.5.0.4
mozillathunderbird
1.5.0.5
mozillathunderbird
1.5.0.6
mozillathunderbird
1.5.0.7
mozillathunderbird
1.5.0.8
mozillathunderbird
1.5.0.9
mozillathunderbird
1.5.0.10
mozillathunderbird
1.5.0.11
mozillathunderbird
1.5.0.12
mozillathunderbird
1.5.0.13
mozillathunderbird
1.5.0.14
mozillathunderbird
1.5.1
mozillathunderbird
1.5.2
mozillathunderbird
1.7.1
mozillathunderbird
1.7.3
mozillathunderbird
2.0.0.0
mozillathunderbird
2.0.0.1
mozillathunderbird
2.0.0.2
mozillathunderbird
2.0.0.3
mozillathunderbird
2.0.0.4
mozillathunderbird
2.0.0.5
mozillathunderbird
2.0.0.6
mozillathunderbird
2.0.0.7
mozillathunderbird
2.0.0.8
mozillathunderbird
2.0.0.9
mozillathunderbird
2.0.0.11
mozillathunderbird
2.0.0.12
mozillathunderbird
2.0.0.13
mozillathunderbird
2.0.0.14
mozillathunderbird
2.0.0.15
mozillathunderbird
2.0.0.16
mozillathunderbird
2.0.0.17
mozillathunderbird
2.0.0.18
mozillathunderbird
2.0.0.19
mozillathunderbird
2.0.0.20
mozillathunderbird
2.0_.4:_.4
mozillathunderbird
2.0_.5:_.5
mozillathunderbird
2.0_.6:_.6
mozillathunderbird
2.0_.9:_.9
mozillathunderbird
2.0_.12:_.12
mozillathunderbird
2.0_.13:_.13
mozillathunderbird
2.0_.14:_.14
mozillathunderbird
2.0_8:_8
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mozilla-thunderbird
dapper
ignored
hardy
dne
intrepid
dne
jaunty
dne
karmic
dne
lucid
dne
seamonkey
dapper
dne
hardy
Fixed 2.0.8+build1+nobinonly-0ubuntu0.8.04.1
released
intrepid
ignored
jaunty
Fixed 2.0.8+build1+nobinonly-0ubuntu0.9.04.1
released
karmic
not-affected
lucid
not-affected
thunderbird
dapper
dne
hardy
Fixed 2.0.0.22+build1+nobinonly-0ubuntu0.8.04.1
released
intrepid
Fixed 2.0.0.22+build1+nobinonly-0ubuntu0.8.10.1
released
jaunty
Fixed 2.0.0.22+build1+nobinonly-0ubuntu0.9.04.1
released
karmic
Fixed 2.0.0.22+build1+nobinonly-0ubuntu1.nspr474
released
lucid
Fixed 2.0.0.22+build1+nobinonly-0ubuntu1.nspr474
released
References
http://secunia.com/advisories/35561
http://secunia.com/advisories/35602
http://secunia.com/advisories/35633
http://secunia.com/advisories/35882
http://securitytracker.com/id?1022433
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408
http://www.debian.org/security/2009/dsa-1830
http://www.mandriva.com/security/advisories?name=MDVSA-2009:141
http://www.mozilla.org/security/announce/2009/mfsa2009-33.html
http://www.redhat.com/support/errata/RHSA-2009-1134.html
http://www.securityfocus.com/bid/35461
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275
https://bugzilla.mozilla.org/show_bug.cgi?id=495057
https://exchange.xforce.ibmcloud.com/vulnerabilities/51315
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9994
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html
http://secunia.com/advisories/35561
http://secunia.com/advisories/35602
http://secunia.com/advisories/35633
http://secunia.com/advisories/35882
http://securitytracker.com/id?1022433
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408
http://www.debian.org/security/2009/dsa-1830
http://www.mandriva.com/security/advisories?name=MDVSA-2009:141
http://www.mozilla.org/security/announce/2009/mfsa2009-33.html
http://www.redhat.com/support/errata/RHSA-2009-1134.html
http://www.securityfocus.com/bid/35461
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275
https://bugzilla.mozilla.org/show_bug.cgi?id=495057
https://exchange.xforce.ibmcloud.com/vulnerabilities/51315
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9994
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html