CVE-2009-2210

Thunderbird mail crash

Published Jun 25, 2009 CVSS 2.0 · 9.3 Critical EPSS 3.8% KEV · Not listed
Description
Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2009-2206 Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 5:44 AM
Reserved
Jun 25, 2009, 12:00 AM
Status
Modified
Published
Jun 25, 2009, 5:30 PM
Modified
Jun 16, 2026, 11:09 PM
Severity
Important
Public date
Jun 22, 2009, 12:00 AM