2014-02-17 23:55:05 2016-10-04 04:01:15

Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in a (1) OBJECT or (2) EMBED element, a related issue to CVE-2013-6674.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE
Mozilla SeaMonkey 2.10 beta2 Mozilla SeaMonkey 1.0.6 Mozilla SeaMonkey 2.13 beta3 Mozilla Seamonkey 2.14 beta3 Mozilla SeaMonkey 2.13 beta2 Mozilla SeaMonkey 2.0.10 Mozilla Seamonkey 2.14 beta2 Mozilla SeaMonkey 2.13 beta1 Mozilla SeaMonkey 2.11 beta3 Mozilla SeaMonkey 2.0.12 Mozilla Thunderbird Extended Support Release (ESR) 17.0.2 Mozilla Thunderbird Extended Support Release (ESR) 17.0.5 Mozilla SeaMonkey 2.0.14 Mozilla Thunderbird Extended Support Release (ESR) 17.0.4 Mozilla SeaMonkey 2.0.11 Mozilla SeaMonkey 2.0.13 Mozilla Thunderbird Extended Support Release (ESR) 17.0.1 Mozilla Thunderbird Extended Support Release (ESR) 17.0.3 Mozilla SeaMonkey 2.1 alpha2 Mozilla SeaMonkey 2.1 alpha3 Mozilla SeaMonkey 2.1 alpha1 Mozilla Seamonkey 2.17 beta4 Mozilla Seamonkey 2.15 beta6 Mozilla SeaMonkey 2.18 beta4 Mozilla Seamonkey 2.15 beta5 Mozilla Seamonkey 2.16 beta5 Mozilla Seamonkey 2.15 beta4 Mozilla Seamonkey 2.16 beta4 Mozilla Thunderbird Extended Support Release (ESR) 17.0.6 Mozilla Thunderbird Extended Support Release (ESR) 17.0.8 Mozilla Thunderbird Extended Support Release (ESR) 17.0.7 Mozilla SeaMonkey 2.1 Beta 2 Mozilla SeaMonkey 1.5.0.9 Mozilla SeaMonkey 2.1 Beta 3 Mozilla SeaMonkey 2.1 Beta 1 Mozilla SeaMonkey 1.1.8 Mozilla Seamonkey 1.1.6 Mozilla SeaMonkey 1.5.0.8 Mozilla SeaMonkey 1.1.9 Mozilla SeaMonkey 2.1 Release Candidate 2 Mozilla SeaMonkey 2.0 RC1 Mozilla SeaMonkey 2.1 Release Candidate 1 Mozilla Seamonkey 1.1.3 Mozilla SeaMonkey 2.0 RC2 Mozilla Seamonkey 1.1.1 Mozilla Seamonkey 1.1.4 Mozilla Seamonkey 1.1.7 Mozilla Seamonkey 1.1.2 Mozilla Seamonkey 1.1.5 Mozilla SeaMonkey 2.1 Mozilla SeaMonkey 2.13 Mozilla Seamonkey 2.14 Mozilla SeaMonkey 2.11 Mozilla SeaMonkey 2.0 Alpha 1 Mozilla SeaMonkey 2.0 Alpha 3 Mozilla SeaMonkey 2.0 Alpha 2 Mozilla SeaMonkey 2.12 Mozilla SeaMonkey 2.10 Mozilla Thunderbird Extended Support Release (ESR) 17.0 Mozilla SeaMonkey 2.19 Mozilla Seamonkey 2.15.1 Mozilla Seamonkey 2.16 Mozilla SeaMonkey 1.5.0.10 Mozilla Seamonkey 2.15.2 Mozilla SeaMonkey 2.0 Mozilla SeaMonkey 2.0.6 Mozilla Seamonkey 2.17 Mozilla SeaMonkey 2.0.9 Mozilla SeaMonkey 2.0.8 Mozilla Seamonkey 2.15 Mozilla SeaMonkey 2.0.2 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.4 Mozilla SeaMonkey 2.0.7 Mozilla SeaMonkey 2.0.1 Mozilla SeaMonkey 2.0.3 Mozilla SeaMonkey 1.1.14 Mozilla SeaMonkey 1.1.11 Mozilla SeaMonkey 1.1.12 Mozilla SeaMonkey 1.1.10 Mozilla SeaMonkey 2.10.1 Mozilla SeaMonkey 1.1.15 Mozilla SeaMonkey 1.1.16 Mozilla SeaMonkey 1.0 Mozilla SeaMonkey 1.1.13 Mozilla SeaMonkey Mozilla Thunderbird 17.0 Mozilla SeaMonkey 2.18 beta1 Mozilla Seamonkey 2.16 beta3 Mozilla Seamonkey 2.15 beta2 Mozilla Seamonkey 2.16 beta2 Mozilla Seamonkey 2.15 beta1 Mozilla Seamonkey 2.16 beta1 Mozilla SeaMonkey 2.19 beta2 Mozilla Thunderbird 17.0.2 Mozilla SeaMonkey 2.19 beta1 Mozilla Seamonkey 2.17 beta3 Mozilla Thunderbird 17.0.3 Mozilla SeaMonkey 2.18 beta3 Mozilla Seamonkey 2.17 beta2 Mozilla SeaMonkey 2.18 beta2 Mozilla Seamonkey 2.17 beta1 Mozilla Seamonkey 2.15 beta3 Mozilla Thunderbird 17.0.1 Mozilla Seamonkey 1.1.19 Mozilla SeaMonkey 1.1.17 Mozilla Seamonkey 1.1.18 Mozilla Seamonkey 2.16.2 Mozilla SeaMonkey 2.12.1 Mozilla SeaMonkey 1.1 beta Mozilla Seamonkey 2.16.1 Mozilla SeaMonkey 1.1 Mozilla SeaMonkey 2.0 Beta 2 Mozilla SeaMonkey 1.0 beta Mozilla Thunderbird 17.0.6 Mozilla SeaMonkey 2.0 Beta 1 Mozilla Thunderbird 17.0.7 Mozilla Thunderbird 17.0.8 Mozilla SeaMonkey 1.0 alpha Mozilla SeaMonkey 1.1 alpha Mozilla Thunderbird 17.0.4 Mozilla Thunderbird 17.0.5 Mozilla SeaMonkey 2.13 beta5 Mozilla SeaMonkey 1.0.3 Mozilla SeaMonkey 2.10 beta3 Mozilla SeaMonkey 2.12 beta1 Mozilla SeaMonkey 2.13 beta6 Mozilla SeaMonkey 1.0.8 Mozilla SeaMonkey 2.11 beta1 Mozilla SeaMonkey 2.12 beta2 Mozilla SeaMonkey 1.0.5 Mozilla SeaMonkey 2.11 beta2 Mozilla SeaMonkey 2.12 beta3 Mozilla Seamonkey 2.14 beta1 Mozilla SeaMonkey 1.0.2 Mozilla SeaMonkey 2.12 beta4 Mozilla SeaMonkey 2.11 beta4 Mozilla SeaMonkey 2.12 beta5 Mozilla SeaMonkey 1.0.4 Mozilla SeaMonkey 2.11 beta5 Mozilla SeaMonkey 2.12 beta6 Mozilla Seamonkey 2.14 beta4 Mozilla SeaMonkey 1.0.1 Mozilla SeaMonkey 2.10 beta1 Mozilla SeaMonkey 2.11 beta6 Mozilla SeaMonkey 2.13 beta4 Mozilla Seamonkey 2.14 beta5 Mozilla SeaMonkey 1.0.7 Mozilla SeaMonkey 1.0.9 Mozilla SeaMonkey 2.17.1 Mozilla Seamonkey 2.13.2 Mozilla SeaMonkey 2.13.1 Mozilla Thunderbird Extended Support Release (ESR) 17.0.10