Home

CVE-2006-6505

Description

Multiple heap-based buffer overflows in Mozilla Thunderbird before 1.5.0.9 and SeaMonkey before 1.0.7 allow remote attackers to execute arbitrary code via (1) external message modies with long Content-Type headers or (2) long RFC2047-encoded (MIME non-ASCII) headers.

Risk Information

Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
29.376

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Mozilla Thunderbird 1.5.0.8Windows
Multiple vulnerabilities affected in SeaMonkey 1.0.6Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 1.5.0.8Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-315938Mozilla Thunderbird (68.12.0)
PATCH-341197SeaMonkey (2.53.19)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234