CVE-2006-5877 | BDVDB-2026-22419 Detail

Description#

The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cause a denial of service (crash), as demonstrated with Mozilla Thunderbird.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://bugzilla.mozdev.org/show_bug.cgi?id=9730
http://www.securityfocus.com/bid/22684
http://enigmail.mozdev.org/changelog.html#enig0.94.2
http://www.ubuntu.com/usn/usn-427-1

Exploit#

No public exploit known

History#

Version 12007-02-23Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.