Vulnerability in Mozilla Thunderbird
CVE-2005-2353
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
EPSS: 0.003 (21.5th percentile) — read the EPSS interpretation.
Affected products
- Mozilla Thunderbird — versions 1.5.0.9
- N/a — versions n/a
References
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vendor-advisory, x_refsource_DEBIAN)
- security@debian.org (x_refsource_UBUNTU, vendor-advisory)
- security@debian.org (vendor-advisory, x_refsource_MANDRIVA)
- security@debian.org (x_refsource_SECUNIA, third-party-advisory)
- security@debian.org (vendor-advisory, x_refsource_MANDRIVA)
- security@debian.org (vendor-advisory, x_refsource_DEBIAN)
- security@debian.org (vdb-entry, x_refsource_BID)