CVE-2010-0163: Medium severity Mozilla Thunderbird vulnerability
Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0163?
CVE-2010-0163 has been classified as a medium severity vulnerability due to its potential for denial of service and arbitrary code execution.
How do I fix CVE-2010-0163?
To fix CVE-2010-0163, update Mozilla Thunderbird to version 2.0.0.24 or later, or upgrade SeaMonkey to version 1.1.19 or later.
What software is affected by CVE-2010-0163?
CVE-2010-0163 affects multiple versions of Mozilla Thunderbird prior to 2.0.0.24 and SeaMonkey versions prior to 1.1.19.
What type of attacks can CVE-2010-0163 facilitate?
CVE-2010-0163 can facilitate denial of service attacks or potentially allow remote attackers to execute arbitrary code.
Is CVE-2010-0163 easy to exploit?
Yes, CVE-2010-0163 can be easily exploited through specially crafted email messages.