Detections
Analytics
Mozilla Thunderbird 3.1.x < 3.1.6 Buffer Overflow Vulnerability
high Log Correlation Engine Plugin ID 801237
Synopsis
The remote host has a web browser installed that is vulnerable to a buffer overflow attack.Description
Versions of Thunderbird 3.1.x earlier than 3.1.6 are potentially affected by a buffer overflow vulnerability when mixing 'document.write()' and DOM insertions. (MFSA 2010-73)Solution
Upgrade to Thunderbird 3.1.6 or later.See Also
http://.norman.com/about_norman/press_center/news_archive/2010/129223
http://.mozilla.org/security/known-vulnerabilities/thunderbird31.html#thunderbird3.1.6
Plugin Details
Severity: High
ID: 801237
Family: SMTP Clients
Published: 10/28/2010
Nessus ID: 50385
Risk Information
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.6
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
Patch Publication Date: 10/27/2010
Vulnerability Publication Date: 10/26/2010
Exploitable With
CANVAS (CANVAS)
Metasploit (Mozilla Firefox Interleaving document.write and appendChild Exploit)
Reference Information
CVE: CVE-2010-3765
BID: 44425