Mozilla Thunderbird/Seamonkey CVE-2014-2018 HTML Injection Vulnerability
BID:65620
Info
Mozilla Thunderbird/Seamonkey CVE-2014-2018 HTML Injection Vulnerability
| Bugtraq ID: | 65620 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-2018 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 06 2014 12:00AM |
| Updated: | Feb 06 2014 12:00AM |
| Credit: | Ateeq ur Rehman Khan |
| Vulnerable: |
Mozilla Thunderbird 17.0.7 Mozilla Thunderbird 17.0.6 Mozilla Thunderbird 17.0.5 Mozilla Thunderbird 17.0.4 Mozilla Thunderbird 17.0.3 Mozilla Thunderbird 17.0.2 Mozilla Thunderbird 17.0.1 Mozilla Thunderbird 17.0.8 Mozilla Thunderbird 17.0 Mozilla SeaMonkey 2.17.1 Mozilla SeaMonkey 2.16.2 Mozilla SeaMonkey 2.16.1 Mozilla SeaMonkey 2.15.1 Mozilla SeaMonkey 2.13.2 Mozilla SeaMonkey 2.10.1 Mozilla SeaMonkey 2.0.11 Mozilla SeaMonkey 2.0.9 Mozilla SeaMonkey 2.0.8 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.4 Mozilla SeaMonkey 2.0.3 Mozilla SeaMonkey 2.0.2 Mozilla SeaMonkey 2.0.1 Mozilla SeaMonkey 1.1.19 Mozilla SeaMonkey 1.1.18 Mozilla SeaMonkey 1.1.17 Mozilla SeaMonkey 1.1.16 Mozilla SeaMonkey 1.1.15 Mozilla SeaMonkey 1.1.14 Mozilla SeaMonkey 1.1.13 Mozilla SeaMonkey 1.1.12 Mozilla SeaMonkey 1.1.11 Mozilla SeaMonkey 1.1.10 Mozilla SeaMonkey 1.1.9 Mozilla SeaMonkey 1.1.8 Mozilla SeaMonkey 1.1.7 Mozilla SeaMonkey 1.1.6 Mozilla SeaMonkey 1.1.5 Mozilla SeaMonkey 1.1.4 Mozilla SeaMonkey 1.1.3 Mozilla SeaMonkey 1.1.2 Mozilla SeaMonkey 1.1.1 Mozilla SeaMonkey 1.0.99 Mozilla SeaMonkey 1.0.9 Mozilla SeaMonkey 1.0.8 Mozilla SeaMonkey 1.0.7 Mozilla SeaMonkey 1.0.6 Mozilla SeaMonkey 1.0.5 Mozilla SeaMonkey 1.0.3 Mozilla SeaMonkey 1.0.2 Mozilla SeaMonkey 1.0.1 Mozilla SeaMonkey 2.9.1 Mozilla SeaMonkey 2.9 Beta4 Mozilla SeaMonkey 2.9 Beta3 Mozilla SeaMonkey 2.9 Beta2 Mozilla SeaMonkey 2.9 Beta1 Mozilla SeaMonkey 2.9 Mozilla SeaMonkey 2.8 Beta6 Mozilla SeaMonkey 2.8 Beta5 Mozilla SeaMonkey 2.8 Beta4 Mozilla SeaMonkey 2.8 Beta3 Mozilla SeaMonkey 2.8 Beta2 Mozilla SeaMonkey 2.8 Beta1 Mozilla SeaMonkey 2.8 Mozilla SeaMonkey 2.7.2 Mozilla SeaMonkey 2.7.1 Mozilla SeaMonkey 2.7 Beta5 Mozilla SeaMonkey 2.7 Beta4 Mozilla SeaMonkey 2.7 Beta3 Mozilla SeaMonkey 2.7 Beta2 Mozilla SeaMonkey 2.7 Beta1 Mozilla SeaMonkey 2.7 Mozilla SeaMonkey 2.6.1 Mozilla SeaMonkey 2.6 Beta4 Mozilla SeaMonkey 2.6 Beta3 Mozilla SeaMonkey 2.6 Beta2 Mozilla SeaMonkey 2.6 Beta1 Mozilla SeaMonkey 2.6 Mozilla SeaMonkey 2.5 Beta4 Mozilla SeaMonkey 2.5 Beta3 Mozilla SeaMonkey 2.5 Beta2 Mozilla SeaMonkey 2.5 Beta1 Mozilla SeaMonkey 2.5 Mozilla SeaMonkey 2.4.1 Mozilla SeaMonkey 2.4 Beta3 Mozilla SeaMonkey 2.4 Beta2 Mozilla SeaMonkey 2.4 Beta1 Mozilla SeaMonkey 2.4 Mozilla SeaMonkey 2.3.3 Mozilla SeaMonkey 2.3.2 Mozilla SeaMonkey 2.3.1 Mozilla SeaMonkey 2.3 Beta3 Mozilla SeaMonkey 2.3 Beta2 Mozilla SeaMonkey 2.3 Beta1 Mozilla SeaMonkey 2.3 Mozilla SeaMonkey 2.2 Beta3 Mozilla SeaMonkey 2.2 Beta2 Mozilla SeaMonkey 2.2 Beta1 Mozilla SeaMonkey 2.2 Mozilla SeaMonkey 2.1b2 Mozilla SeaMonkey 2.19 Beta2 Mozilla SeaMonkey 2.19 Beta1 Mozilla SeaMonkey 2.19 Mozilla SeaMonkey 2.18 Beta4 Mozilla SeaMonkey 2.18 Beta3 Mozilla SeaMonkey 2.18 Beta2 Mozilla SeaMonkey 2.18 Beta1 Mozilla SeaMonkey 2.17 Beta4 Mozilla SeaMonkey 2.17 Beta3 Mozilla SeaMonkey 2.17 Beta2 Mozilla SeaMonkey 2.17 Beta1 Mozilla SeaMonkey 2.17 Mozilla SeaMonkey 2.16 Beta5 Mozilla SeaMonkey 2.16 Beta4 Mozilla SeaMonkey 2.16 Beta3 Mozilla SeaMonkey 2.16 Beta2 Mozilla SeaMonkey 2.16 Beta1 Mozilla SeaMonkey 2.16 Mozilla SeaMonkey 2.15.2 Mozilla SeaMonkey 2.15 Beta6 Mozilla SeaMonkey 2.15 Beta5 Mozilla SeaMonkey 2.15 Beta4 Mozilla SeaMonkey 2.15 Beta3 Mozilla SeaMonkey 2.15 Beta2 Mozilla SeaMonkey 2.15 Beta1 Mozilla SeaMonkey 2.15 Mozilla SeaMonkey 2.14 Beta5 Mozilla SeaMonkey 2.14 Beta4 Mozilla SeaMonkey 2.14 Beta3 Mozilla SeaMonkey 2.14 Beta2 Mozilla SeaMonkey 2.14 Beta1 Mozilla SeaMonkey 2.14 Mozilla SeaMonkey 2.13.1 Mozilla SeaMonkey 2.13 Beta6 Mozilla SeaMonkey 2.13 Beta5 Mozilla SeaMonkey 2.13 Beta4 Mozilla SeaMonkey 2.13 Beta3 Mozilla SeaMonkey 2.13 Beta2 Mozilla SeaMonkey 2.13 Beta1 Mozilla SeaMonkey 2.13 Mozilla SeaMonkey 2.12.1 Mozilla SeaMonkey 2.12 Beta6 Mozilla SeaMonkey 2.12 Beta5 Mozilla SeaMonkey 2.12 Beta4 Mozilla SeaMonkey 2.12 Beta3 Mozilla SeaMonkey 2.12 Beta2 Mozilla SeaMonkey 2.12 Beta1 Mozilla SeaMonkey 2.12 Mozilla SeaMonkey 2.11 Beta6 Mozilla SeaMonkey 2.11 Beta5 Mozilla SeaMonkey 2.11 Beta4 Mozilla SeaMonkey 2.11 Beta3 Mozilla SeaMonkey 2.11 Beta2 Mozilla SeaMonkey 2.11 Beta1 Mozilla SeaMonkey 2.11 Mozilla SeaMonkey 2.10 Beta3 Mozilla SeaMonkey 2.10 Beta2 Mozilla SeaMonkey 2.10 Beta1 Mozilla SeaMonkey 2.10 Mozilla SeaMonkey 2.1 Rc2 Mozilla SeaMonkey 2.1 Rc1 Mozilla SeaMonkey 2.1 Beta3 Mozilla SeaMonkey 2.1 Beta2 Mozilla SeaMonkey 2.1 Beta1 Mozilla SeaMonkey 2.1 Alpha3 Mozilla SeaMonkey 2.1 Alpha2 Mozilla SeaMonkey 2.1 Alpha1 Mozilla SeaMonkey 2.1 Mozilla SeaMonkey 2.0.7 Mozilla SeaMonkey 2.0.6 Mozilla SeaMonkey 2.0.14 Mozilla SeaMonkey 2.0.13 Mozilla SeaMonkey 2.0.12 Mozilla SeaMonkey 2.0.10 Mozilla SeaMonkey 2.0 Rc2 Mozilla SeaMonkey 2.0 Rc1 Mozilla SeaMonkey 2.0 Beta 2 Mozilla SeaMonkey 2.0 Beta 1 Mozilla SeaMonkey 2.0 Alpha 3 Mozilla SeaMonkey 2.0 Alpha 2 Mozilla SeaMonkey 2.0 Alpha 1 Mozilla SeaMonkey 2.0 Mozilla SeaMonkey 1.5.0.9 Mozilla SeaMonkey 1.5.0.8 Mozilla SeaMonkey 1.5.0.10 Mozilla SeaMonkey 1.1 beta Mozilla SeaMonkey 1.0 dev Mozilla SeaMonkey 1.0 |
| Not Vulnerable: |
Mozilla Thunderbird 23.0 Mozilla SeaMonkey 2.20 |
References
Mozilla Thunderbird/Seamonkey CVE-2014-2018 HTML Injection Vulnerability
References:
References:
- Mozilla Bug Bounty #5 - WireTap Remote Web Vulnerability (Vulnerability Lab)
- Mozilla Thunderbird Homepage (Mozilla )
- SeaMonkey Homepage (Mozilla)
- Vulnerability Note VU#863369 Mozilla Thunderbird does not adequately restrict HT (CERT)
- Mozilla Foundation Security Advisory 2014-14 (Mozilla Foundations)