CVE-2006-3804: Buffer Overflow
Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) via a VCard attachment with a malformed base64 field, which copies more data than expected due to an integer underflow.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3804?
CVE-2006-3804 is classified as a high severity vulnerability due to its potential to cause remote denial of service.
How do I fix CVE-2006-3804?
To fix CVE-2006-3804, update Mozilla Thunderbird to version 1.5.0.5 or later and SeaMonkey to version 1.0.3 or later.
What are the affected versions for CVE-2006-3804?
Affected versions for CVE-2006-3804 include Thunderbird versions prior to 1.5.0.5 and SeaMonkey versions prior to 1.0.3.
What type of attack does CVE-2006-3804 enable?
CVE-2006-3804 enables remote attackers to exploit a buffer overflow via malformed VCard attachments.
Who is at risk for CVE-2006-3804?
Users of older versions of Mozilla Thunderbird and SeaMonkey are at risk for CVE-2006-3804 if they handle VCard attachments.