CVE-2009-2210

Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
VendorProductVersion
mozillaseamonkey
𝑥
≤ 1.1.16
mozillaseamonkey
1.0
mozillaseamonkey
1.0
mozillaseamonkey
1.0:alpha
mozillaseamonkey
1.0:beta
mozillaseamonkey
1.0.1
mozillaseamonkey
1.0.2
mozillaseamonkey
1.0.3
mozillaseamonkey
1.0.4
mozillaseamonkey
1.0.5
mozillaseamonkey
1.0.6
mozillaseamonkey
1.0.7
mozillaseamonkey
1.0.8
mozillaseamonkey
1.0.9
mozillaseamonkey
1.0.99
mozillaseamonkey
1.1
mozillaseamonkey
1.1:alpha
mozillaseamonkey
1.1:beta
mozillaseamonkey
1.1.1
mozillaseamonkey
1.1.2
mozillaseamonkey
1.1.3
mozillaseamonkey
1.1.4
mozillaseamonkey
1.1.5
mozillaseamonkey
1.1.5:1.1.10
mozillaseamonkey
1.1.6
mozillaseamonkey
1.1.7
mozillaseamonkey
1.1.8
mozillaseamonkey
1.1.9
mozillaseamonkey
1.1.10
mozillaseamonkey
1.1.11
mozillaseamonkey
1.1.12
mozillaseamonkey
1.1.13
mozillaseamonkey
1.1.14
mozillaseamonkey
1.1.15
mozillaseamonkey
1.5.0.8
mozillaseamonkey
1.5.0.9
mozillaseamonkey
1.5.0.10
mozillathunderbird
𝑥
≤ 2.0.0.21
mozillathunderbird
0.1
mozillathunderbird
0.2
mozillathunderbird
0.3
mozillathunderbird
0.4
mozillathunderbird
0.5
mozillathunderbird
0.6
mozillathunderbird
0.7
mozillathunderbird
0.7.1
mozillathunderbird
0.7.2
mozillathunderbird
0.7.3
mozillathunderbird
0.8
mozillathunderbird
0.9
mozillathunderbird
1.0
mozillathunderbird
1.0.1
mozillathunderbird
1.0.2
mozillathunderbird
1.0.3
mozillathunderbird
1.0.4
mozillathunderbird
1.0.5
mozillathunderbird
1.0.5:beta
mozillathunderbird
1.0.6
mozillathunderbird
1.0.7
mozillathunderbird
1.0.8
mozillathunderbird
1.5
mozillathunderbird
1.5:beta2
mozillathunderbird
1.5.0.1
mozillathunderbird
1.5.0.2
mozillathunderbird
1.5.0.3
mozillathunderbird
1.5.0.4
mozillathunderbird
1.5.0.5
mozillathunderbird
1.5.0.6
mozillathunderbird
1.5.0.7
mozillathunderbird
1.5.0.8
mozillathunderbird
1.5.0.9
mozillathunderbird
1.5.0.10
mozillathunderbird
1.5.0.11
mozillathunderbird
1.5.0.12
mozillathunderbird
1.5.0.13
mozillathunderbird
1.5.0.14
mozillathunderbird
1.5.1
mozillathunderbird
1.5.2
mozillathunderbird
1.7.1
mozillathunderbird
1.7.3
mozillathunderbird
2.0.0.0
mozillathunderbird
2.0.0.1
mozillathunderbird
2.0.0.2
mozillathunderbird
2.0.0.3
mozillathunderbird
2.0.0.4
mozillathunderbird
2.0.0.5
mozillathunderbird
2.0.0.6
mozillathunderbird
2.0.0.7
mozillathunderbird
2.0.0.8
mozillathunderbird
2.0.0.9
mozillathunderbird
2.0.0.11
mozillathunderbird
2.0.0.12
mozillathunderbird
2.0.0.13
mozillathunderbird
2.0.0.14
mozillathunderbird
2.0.0.15
mozillathunderbird
2.0.0.16
mozillathunderbird
2.0.0.17
mozillathunderbird
2.0.0.18
mozillathunderbird
2.0.0.19
mozillathunderbird
2.0.0.20
mozillathunderbird
2.0_.4:_.4
mozillathunderbird
2.0_.5:_.5
mozillathunderbird
2.0_.6:_.6
mozillathunderbird
2.0_.9:_.9
mozillathunderbird
2.0_.12:_.12
mozillathunderbird
2.0_.13:_.13
mozillathunderbird
2.0_.14:_.14
mozillathunderbird
2.0_8:_8
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mozilla-thunderbird
lucid
dne
karmic
dne
jaunty
dne
intrepid
dne
hardy
dne
dapper
ignored
seamonkey
lucid
not-affected
karmic
not-affected
jaunty
Fixed 2.0.8+build1+nobinonly-0ubuntu0.9.04.1
released
intrepid
ignored
hardy
Fixed 2.0.8+build1+nobinonly-0ubuntu0.8.04.1
released
dapper
dne
thunderbird
lucid
Fixed 2.0.0.22+build1+nobinonly-0ubuntu1.nspr474
released
karmic
Fixed 2.0.0.22+build1+nobinonly-0ubuntu1.nspr474
released
jaunty
Fixed 2.0.0.22+build1+nobinonly-0ubuntu0.9.04.1
released
intrepid
Fixed 2.0.0.22+build1+nobinonly-0ubuntu0.8.10.1
released
hardy
Fixed 2.0.0.22+build1+nobinonly-0ubuntu0.8.04.1
released
dapper
dne
References
http://secunia.com/advisories/35561
http://secunia.com/advisories/35602
http://secunia.com/advisories/35633
http://secunia.com/advisories/35882
http://securitytracker.com/id?1022433
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408
http://www.debian.org/security/2009/dsa-1830
http://www.mandriva.com/security/advisories?name=MDVSA-2009:141
http://www.mozilla.org/security/announce/2009/mfsa2009-33.html
http://www.redhat.com/support/errata/RHSA-2009-1134.html
http://www.securityfocus.com/bid/35461
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275
https://bugzilla.mozilla.org/show_bug.cgi?id=495057
https://exchange.xforce.ibmcloud.com/vulnerabilities/51315
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9994
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html
http://secunia.com/advisories/35561
http://secunia.com/advisories/35602
http://secunia.com/advisories/35633
http://secunia.com/advisories/35882
http://securitytracker.com/id?1022433
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408
http://www.debian.org/security/2009/dsa-1830
http://www.mandriva.com/security/advisories?name=MDVSA-2009:141
http://www.mozilla.org/security/announce/2009/mfsa2009-33.html
http://www.redhat.com/support/errata/RHSA-2009-1134.html
http://www.securityfocus.com/bid/35461
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275
https://bugzilla.mozilla.org/show_bug.cgi?id=495057
https://exchange.xforce.ibmcloud.com/vulnerabilities/51315
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9994
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html