CVE-2006-3804: Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote a...

Security readout for executives and security teams

This is an old mail-client crash issue. A malicious VCard attachment could make vulnerable Mozilla Thunderbird or SeaMonkey versions crash when malformed base64 data is processed. The bundle supports denial of service, not confirmed code execution or active exploitation. Exposure is most likely in legacy systems still running Thunderbird before 1.5.0.5 or SeaMonkey before 1.0.3, especially where users can receive and open VCard attachments. Modern environments are unlikely to be exposed unless obsolete packages remain. Treat this as a legacy exposure cleanup item unless obsolete mail clients are still present. Business urgency rises if vulnerable clients handle untrusted email attachments in production or regulated environments. Mitigation focus: Upgrade Thunderbird to 1.5.0.5 or later where applicable.; Upgrade SeaMonkey to 1.0.3 or later where applicable.; Apply relevant Linux vendor security updates for packaged Mozilla clients..

Prepared

Jun 29, 2026, 11:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.