You are here: Security Center > Mozilla Foundation Security Advisories > MFSA 2009-33

Mozilla Foundation Security Advisory 2009-33

Title: Crash viewing multipart/alternative message with text/enhanced part
Impact: High
Announced: June 22, 2009
Reporter: Bernd Jendrissek
Products: Thunderbird, SeaMonkey

Fixed in: Thunderbird 2.0.0.22
  SeaMonkey 1.1.17

Description

Bernd Jendrissek reported a crash in Thunderbird when viewing a multipart/alternative mail message with a text/enhanced part. Internally this led to operations on an unexpected type of object resulting in a crash which may be exploitable.

References