Lucene search
Mozilla FoundationMFSA2006-49HistoryJul 25, 2006 - 12:00 a.m.
Heap buffer overwrite on malformed VCard — Mozilla
2006-07-2500:00:00
Mozilla Foundation
www.mozilla.org
20
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.379
Percentile
97.2%
A VCard attachment with a malformed base64 field (such as a photo) can trigger a heap buffer overwrite. These have proven exploitable in the past, though in this case the overwrite is accompanied by an integer underflow that would attempt to copy more data than the typical machine has, leading to a crash.
Affected configurations
Node
mozillaseamonkeyRange<1.0.3
ORmozillathunderbirdRange<1.5.0.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mozilla | seamonkey | * | cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:* |
| mozilla | thunderbird | * | cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* |
Related
cert
cert
Mozilla products VCard attachment buffer overflow
2006-07-27 00:00:00
cvelist
cvelist
CVE-2006-3804
2006-07-27 19:00:00
ubuntucve
ubuntucve
CVE-2006-3804
2006-07-27 00:00:00
nvd
nvd
CVE-2006-3804
2006-07-27 19:04:00
debiancve
debiancve
CVE-2006-3804
2006-07-27 19:04:00
cve
cve
CVE-2006-3804
2006-07-27 19:04:00
securityvulns
securityvulns
nessus
nessus
Mozilla Thunderbird < 1.5.0.5 Multiple Vulnerabilities
2006-07-27 00:00:00
GLSA-200608-04 : Mozilla Thunderbird: Multiple vulnerabilities
2006-08-04 00:00:00
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-1924)
2007-10-17 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200608-04 (Thunderbird)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200608-04 (Thunderbird)
2008-09-24 00:00:00
Ubuntu: Security Advisory (USN-329-1)
2022-08-26 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2006-08-03 00:00:00
Mozilla SeaMonkey: Multiple vulnerabilities
2006-08-03 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2006-07-29 00:00:00
Thunderbird vulnerabilities
2006-09-22 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2006-08-16 15:11:18
centos
centos
seamonkey security update
2006-08-04 20:56:41
thunderbird security update
2006-07-29 11:51:27
devhelp, seamonkey security update
2006-08-05 15:16:05
freebsd
freebsd
mozilla -- multiple vulnerabilities
2006-07-25 00:00:00
redhat
redhat
(RHSA-2006:0608) seamonkey security update
2006-07-27 00:00:00
(RHSA-2006:0611) thunderbird security update
2006-07-28 00:00:00
(RHSA-2006:0609) seamonkey security update
2006-08-02 00:00:00
oraclelinux
oraclelinux
Critical thunderbird security update
2006-12-07 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.379
Percentile
97.2%
Related for MFSA2006-49