CVE-2007-1282 Integer overflow in n/a

Critical 9.3 Published 6 Mar 2007 Updated 7 Aug 2024

Remote attackers can execute arbitrary code via a crafted email with an extremely long line, requiring user interaction to open the message.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2007-1282?

CVE-2007-1282 is a critical vulnerability in Mozilla Seamonkey, published on 6 Mar 2007. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Integer overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to trigger a buffer overflow and possibly execute arbitrary code via a text/enhanced or text/richtext e-mail message with an extremely long line.

Which versions are affected by CVE-2007-1282?

It affects 2 products.

Products include Mozilla Seamonkey, Mozilla Thunderbird.

How do I fix CVE-2007-1282?

Upgrade to a fixed version.

Is CVE-2007-1282 being exploited?

There is no known exploitation of CVE-2007-1282 in the wild and no public exploit code.

All Mozilla Seamonkey vulnerabilities

Sources

Also known as GHSA-rc8w-53vr-5ppv.