CVE-2010-0161: Medium severity Mozilla Thunderbird vulnerability
The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via crafted data in a session that uses SSPI.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0161?
CVE-2010-0161 is classified as a high severity denial of service vulnerability due to heap memory corruption that can crash affected applications.
How do I fix CVE-2010-0161?
To fix CVE-2010-0161, upgrade Mozilla Thunderbird to version 2.0.0.24 or later, or SeaMonkey to version 1.1.19 or later.
What versions are affected by CVE-2010-0161?
CVE-2010-0161 affects multiple versions of Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19.
Can CVE-2010-0161 be exploited remotely?
Yes, CVE-2010-0161 can be exploited remotely through malicious SMTP, IMAP, or POP servers.
Which operating systems are vulnerable to CVE-2010-0161?
CVE-2010-0161 affects applications running on Windows Vista, Windows Server 2008 R2, and Windows 7.