CVE-2006-3804

Name of the Vulnerable Software and Affected Versions Mozilla Thunderbird versions prior to 1.5.0.5 SeaMonkey versions prior to 1.0.3

Description The issue is related to a heap-based buffer overflow that can be triggered by a VCard attachment containing a malformed base64 field. This field causes an integer underflow, leading to more data being copied than expected, which can result in a denial of service (crash).

Recommendations For Mozilla Thunderbird versions prior to 1.5.0.5, update to version 1.5.0.5 or later to resolve the issue. For SeaMonkey versions prior to 1.0.3, update to version 1.0.3 or later to resolve the issue.