CVE-2007-1282

EPSS 4.69%
Veröffentlicht 06.03.2007 02:19:00
Zuletzt bearbeitet 16.06.2026 22:37:17
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Integer overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to trigger a buffer overflow and possibly execute arbitrary code via a text/enhanced or text/richtext e-mail message with an extremely long line.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 24

NVD 38 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Seamonkey Version1.0

   Redhat ≫ Enterprise Linux Version4.0 Editionadvanced_server
   Redhat ≫ Enterprise Linux Version4.0 Editionenterprise_server
   Redhat ≫ Enterprise Linux Version4.0 Editionworkstation
   Redhat ≫ Enterprise Linux Desktop Version4.0

Mozilla ≫ Seamonkey Version1.0.1

Mozilla ≫ Seamonkey Version1.0.2

Mozilla ≫ Seamonkey Version1.0.3

Mozilla ≫ Seamonkey Version1.0.4

Mozilla ≫ Seamonkey Version1.0.5

Mozilla ≫ Seamonkey Version1.0.6

Mozilla ≫ Seamonkey Version1.0.7

Mozilla ≫ Thunderbird Version0.1

Mozilla ≫ Thunderbird Version0.2

Mozilla ≫ Thunderbird Version0.3

Mozilla ≫ Thunderbird Version0.4

Mozilla ≫ Thunderbird Version0.5

Mozilla ≫ Thunderbird Version0.6

Mozilla ≫ Thunderbird Version0.7

Mozilla ≫ Thunderbird Version0.7.1

Mozilla ≫ Thunderbird Version0.7.2

Mozilla ≫ Thunderbird Version0.7.3

Mozilla ≫ Thunderbird Version0.8

Mozilla ≫ Thunderbird Version0.9

Mozilla ≫ Thunderbird Version1.0

Mozilla ≫ Thunderbird Version1.0.1

Mozilla ≫ Thunderbird Version1.0.2

Mozilla ≫ Thunderbird Version1.0.3

Mozilla ≫ Thunderbird Version1.0.4

Mozilla ≫ Thunderbird Version1.0.5

Mozilla ≫ Thunderbird Version1.0.6

Mozilla ≫ Thunderbird Version1.0.7

Mozilla ≫ Thunderbird Version1.0.8

Mozilla ≫ Thunderbird Version1.5

Mozilla ≫ Thunderbird Version1.5.0.1

Mozilla ≫ Thunderbird Version1.5.0.2

Mozilla ≫ Thunderbird Version1.5.0.3

Mozilla ≫ Thunderbird Version1.5.0.4

Mozilla ≫ Thunderbird Version1.5.0.6

Mozilla ≫ Thunderbird Version1.5.0.7

Mozilla ≫ Thunderbird Version1.5.0.8

Mozilla ≫ Thunderbird Version1.5.0.9

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.69%	0.906

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc

http://secunia.com/advisories/24457

http://secunia.com/advisories/25588

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131

http://www.debian.org/security/2007/dsa-1336

http://www.redhat.com/support/errata/RHSA-2007-0078.html

Patch

http://www.redhat.com/support/errata/RHSA-2007-0108.html

http://fedoranews.org/cms/node/2747

http://fedoranews.org/cms/node/2749

http://secunia.com/advisories/24406

http://secunia.com/advisories/24456

http://secunia.com/advisories/24522

http://security.gentoo.org/glsa/glsa-200703-18.xml

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.363947

http://osvdb.org/33810

http://www.mozilla.org/security/announce/2007/mfsa2007-10.html

Patch

http://www.securityfocus.com/bid/22845

http://www.vupen.com/english/advisories/2007/0824

https://bugzilla.mozilla.org/show_bug.cgi?id=362735

https://exchange.xforce.ibmcloud.com/vulnerabilities/32810

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11313

https://nvd.nist.gov/vuln/detail/CVE-2007-1282

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-1282

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-1282

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-1282