« Volver al listado

CVE-2006-5877

Estado: ModificadaAlta (7.8)—

The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cause a denial of service (crash), as demonstrated with Mozilla Thunderbird.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Enigmail — Enigmail

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-5877",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-02-23T21:28:00.000",
  "references": [
    {
      "url": "http://bugzilla.mozdev.org/show_bug.cgi?id=9730",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://enigmail.mozdev.org/changelog.html#enig0.94.2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/22684",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ubuntu.com/usn/usn-427-1",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://bugzilla.mozdev.org/show_bug.cgi?id=9730",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://enigmail.mozdev.org/changelog.html#enig0.94.2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/22684",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntu.com/usn/usn-427-1",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cause a denial of service (crash), as demonstrated with Mozilla Thunderbird."
    },
    {
      "lang": "es",
      "value": "La extensión enigmail anterior 0.94.2 no maneja adecuadamente los ficheros adjuntos encriptados al e-mail, lo cual permite a atacantes remotos provocar denegación de servicio (caida), como se demostró con Mozilla Thunderbird."
    }
  ],
  "lastModified": "2026-06-16T22:32:03.597",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:ubuntu:ubuntu_linux:*:*:powerpc:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7C80A2AF-B598-46D0-B54A-DC6C804518B2",
              "versionEndIncluding": "5.10"
            },
            {
              "criteria": "cpe:2.3:o:ubuntu:ubuntu_linux:*:*:powerpc:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C78F7413-DD84-4198-B893-5D9C068ADA5D",
              "versionEndIncluding": "6.06_lts"
            },
            {
              "criteria": "cpe:2.3:o:ubuntu:ubuntu_linux:*:*:powerpc:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "60D1D7AB-363F-413D-A5F5-0E7C41446042",
              "versionEndIncluding": "6.10"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:enigmail:enigmail:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4944FD3F-3DAA-4DCD-8F3B-ECDF55AFA726",
              "versionEndIncluding": "0.92.0"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}