CVE-2006-6505 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Seamonkey

7 documents5 sources
Severity
6.8MEDIUMNVD
EPSS
29.4%
top 3.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Mozilla SeamonkeyMozilla Thunderbird
Timeline
PublishedDec 20
Latest updateMay 3

Description

Multiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1.0.7 allow remote attackers to execute arbitrary code via (1) external message modies with long Content-Type headers or (2) long RFC2047-encoded (MIME non-ASCII) headers.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

▶NVDmozilla/thunderbird1.5.0.8

🔴Vulnerability Details

1
GHSA
GHSA-5v4r-m243-rv3w: Multiple heap-based buffer overflows in Mozilla Thunderbird before 1↗2022-05-03
▶

📋Vendor Advisories

2
Ubuntu
Thunderbird vulnerabilities↗2007-01-05
▶
Red Hat
seamonkey < 1.0.7 multiple vulnerabilities↗2006-12-19
▶

💬Community

3
Bugzilla
seamonkey < 1.0.7 multiple vulnerabilities↗2006-12-21
▶
Bugzilla
CVE-2006-6497 Multiple Thunderbird issues (CVE-2006-6498, CVE-2006-6501, CVE-2006-6502, CVE-2006-6503, CVE-2006-6504, CVE-2006-6505)↗2006-12-14
▶
Bugzilla
CVE-2006-6497 Multiple Seamonkey issues (CVE-2006-6498, CVE-2006-6501, CVE-2006-6502, CVE-2006-6503, CVE-2006-6504, CVE-2006-6505)↗2006-12-14
▶