Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-0163

Fixed in a distro release EPSS 3%

Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.

Published 2010-03-22 · CVE record · OSV

Products: mozilla thunderbird, mozilla seamonkey

Distro releases

ReleasePackageFixed in
Debian 5.0icedove2.0.0.24-0lenny1
Red Hat Enterprise Linux 3seamonkey0:1.0.9-0.55.el3
Red Hat Enterprise Linux 3seamonkey-chat0:1.0.9-0.55.el3
Red Hat Enterprise Linux 3seamonkey-debuginfo0:1.0.9-0.55.el3
Red Hat Enterprise Linux 3seamonkey-devel0:1.0.9-0.55.el3
Red Hat Enterprise Linux 3seamonkey-dom-inspector0:1.0.9-0.55.el3
Red Hat Enterprise Linux 3seamonkey-js-debugger0:1.0.9-0.55.el3
Red Hat Enterprise Linux 3seamonkey-mail0:1.0.9-0.55.el3
Red Hat Enterprise Linux 3seamonkey-nspr0:1.0.9-0.55.el3
Red Hat Enterprise Linux 3seamonkey-nspr-devel0:1.0.9-0.55.el3
Red Hat Enterprise Linux 3seamonkey-nss0:1.0.9-0.55.el3
Red Hat Enterprise Linux 3seamonkey-nss-devel0:1.0.9-0.55.el3
Red Hat Enterprise Linux 4seamonkey0:1.0.9-58.el4_8
Red Hat Enterprise Linux 4seamonkey-chat0:1.0.9-58.el4_8
Red Hat Enterprise Linux 4seamonkey-debuginfo0:1.0.9-58.el4_8
Red Hat Enterprise Linux 4seamonkey-devel0:1.0.9-58.el4_8
Red Hat Enterprise Linux 4seamonkey-dom-inspector0:1.0.9-58.el4_8
Red Hat Enterprise Linux 4seamonkey-js-debugger0:1.0.9-58.el4_8
Red Hat Enterprise Linux 4seamonkey-mail0:1.0.9-58.el4_8
Red Hat Enterprise Linux 4thunderbird0:1.5.0.12-25.el4
Red Hat Enterprise Linux 4thunderbird-debuginfo0:1.5.0.12-25.el4
Red Hat Enterprise Linux 5thunderbird0:2.0.0.24-2.el5_4
Red Hat Enterprise Linux 5thunderbird-debuginfo0:2.0.0.24-2.el5_4
Red Hat rhel productivity 5thunderbird0:2.0.0.24-2.el5_4
Red Hat rhel productivity 5thunderbird-debuginfo0:2.0.0.24-2.el5_4