CVE-2009-2210: mozilla seamonkey
Vulnerability summary
CVE-2009-2210 is a high (CVSS 9.3) vulnerability in mozilla seamonkey. EPSS estimates a 3.80% chance of exploitation in the next 30 days, higher than 90% of scored vulnerabilities.
Not severe (CVSS 9.3, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 3Timeline
- 25-06-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
3.80%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
No change 0.00 pp
From 3.80% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat11 products
- seamonkey< 0:1.0.9-0.39.el3 | < 0:1.0.9-44.el4_8
- seamonkey-chat< 0:1.0.9-0.39.el3 | < 0:1.0.9-44.el4_8
- seamonkey-debuginfo< 0:1.0.9-0.39.el3 | < 0:1.0.9-44.el4_8
- seamonkey-devel< 0:1.0.9-0.39.el3 | < 0:1.0.9-44.el4_8
- seamonkey-dom-inspector< 0:1.0.9-0.39.el3 | < 0:1.0.9-44.el4_8
Mozilla2 products
- seamonkey≤ 1.1.16 | 1.0 | 1.0:alpha | 1.0:beta | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.6 | 1.0.7 | 1.0.8 | 1.0.9 | 1.0.99 | 1.1 | 1.1:alpha | 1.1:beta | 1.1.1 | 1.1.2 | 1.1.3 | 1.1.4 | 1.1.5 | 1.1.5:1.1.10 | 1.1.6 | 1.1.7 | 1.1.8 | 1.1.9 | 1.1.10 | 1.1.11 | 1.1.12 | 1.1.13 | 1.1.14 | 1.1.15 | 1.5.0.8 | 1.5.0.9 | 1.5.0.10
- thunderbird≤ 2.0.0.21 | 0.1 | 0.2 | 0.3 | 0.4 | 0.5 | 0.6 | 0.7 | 0.7.1 | 0.7.2 | 0.7.3 | 0.8 | 0.9 | 1.0 | 1.0.1 | 1.0.2 | 1.0.3 | 1.0.4 | 1.0.5 | 1.0.5:beta | 1.0.6 | 1.0.7 | 1.0.8 | 1.5 | 1.5:beta2 | 1.5.0.1 | 1.5.0.2 | 1.5.0.3 | 1.5.0.4 | 1.5.0.5 | 1.5.0.6 | 1.5.0.7 | 1.5.0.8 | 1.5.0.9 | 1.5.0.10 | 1.5.0.11 | 1.5.0.12 | 1.5.0.13 | 1.5.0.14 | 1.5.1 | 1.5.2 | 1.7.1 | 1.7.3 | 2.0.0.0 | 2.0.0.1 | 2.0.0.2 | 2.0.0.3 | 2.0.0.4 | 2.0.0.5 | 2.0.0.6 | 2.0.0.7 | 2.0.0.8 | 2.0.0.9 | 2.0.0.11 | 2.0.0.12 | 2.0.0.13 | 2.0.0.14 | 2.0.0.15 | 2.0.0.16 | 2.0.0.17 | 2.0.0.18 | 2.0.0.19 | 2.0.0.20 | 2.0_.4 | 2.0_.5 | 2.0_.6 | 2.0_.9 | 2.0_.12 | 2.0_.13 | 2.0_.14 | 2.0_8
2 vendors · 13 products
References
24 links- www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275Vendor AdvisoryX Refsource SLACKWARE
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9994VDB EntrySignatureX Refsource OVAL
- www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.htmlVendor AdvisoryX Refsource FEDORA
- www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.htmlVendor AdvisoryX Refsource FEDORA
Show all 24 references
- slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408Vendor AdvisoryX Refsource SLACKWARE
- bugzilla.mozilla.org/show_bug.cgi?id=495057X Refsource CONFIRM