Patchwire CVEs, their patch status, and feeds to follow them

CVE-2009-2210

Fixed in a distro release EPSS 4%

Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.

Published 2009-06-25 · CVE record · OSV

Products: mozilla seamonkey, mozilla thunderbird

Distro releases

ReleasePackageFixed in
Debian 5.0icedove2.0.0.22-0lenny1
Red Hat Enterprise Linux 3seamonkey0:1.0.9-0.39.el3
Red Hat Enterprise Linux 3seamonkey-chat0:1.0.9-0.39.el3
Red Hat Enterprise Linux 3seamonkey-debuginfo0:1.0.9-0.39.el3
Red Hat Enterprise Linux 3seamonkey-devel0:1.0.9-0.39.el3
Red Hat Enterprise Linux 3seamonkey-dom-inspector0:1.0.9-0.39.el3
Red Hat Enterprise Linux 3seamonkey-js-debugger0:1.0.9-0.39.el3
Red Hat Enterprise Linux 3seamonkey-mail0:1.0.9-0.39.el3
Red Hat Enterprise Linux 3seamonkey-nspr0:1.0.9-0.39.el3
Red Hat Enterprise Linux 3seamonkey-nspr-devel0:1.0.9-0.39.el3
Red Hat Enterprise Linux 3seamonkey-nss0:1.0.9-0.39.el3
Red Hat Enterprise Linux 3seamonkey-nss-devel0:1.0.9-0.39.el3
Red Hat Enterprise Linux 4seamonkey0:1.0.9-44.el4_8
Red Hat Enterprise Linux 4seamonkey-chat0:1.0.9-44.el4_8
Red Hat Enterprise Linux 4seamonkey-debuginfo0:1.0.9-44.el4_8
Red Hat Enterprise Linux 4seamonkey-devel0:1.0.9-44.el4_8
Red Hat Enterprise Linux 4seamonkey-dom-inspector0:1.0.9-44.el4_8
Red Hat Enterprise Linux 4seamonkey-js-debugger0:1.0.9-44.el4_8
Red Hat Enterprise Linux 4seamonkey-mail0:1.0.9-44.el4_8
Red Hat Enterprise Linux 4thunderbird0:1.5.0.12-23.el4
Red Hat Enterprise Linux 4thunderbird-debuginfo0:1.5.0.12-23.el4
Red Hat Enterprise Linux 5thunderbird0:2.0.0.22-2.el5_3
Red Hat Enterprise Linux 5thunderbird-debuginfo0:2.0.0.22-2.el5_3
Red Hat rhel productivity 5thunderbird0:2.0.0.22-2.el5_3
Red Hat rhel productivity 5thunderbird-debuginfo0:2.0.0.22-2.el5_3