The installed version of Thunderbird 3.1 is earlier than 3.1.6.  Such versions are potentially affected by a heap-based buffer overflow vulnerability. 

The combination of DOM insertions and the handling of the JavaScript function 'document.write()' exposes an error that can lead to a heap-based buffer overflow.

Note that reading email does not expose this vulnerability, however the vulnerability can be triggered when viewing RSS feeds while JavaScript or third-party plugins providing browser-like functionality are enabled. 

Also, note that there have been reports that this issue is being actively exploited in the wild.

Detections

Analytics

Mozilla Thunderbird 3.1 < 3.1.6 Buffer Overflow

high Nessus Plugin ID 50385

No dependents found