CVE-2005-2353
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite...
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
Exploit likelihood
What each source reports
NVD Score used
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
- Record
CVE-2005-2353- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
- Record
CVE-2005-2353- Updated
- 2026-11-02
EUVDEUVD-2005-2354No score
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
- Record
EUVD-2005-2354- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-79jc-343r-49r6No score
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite...
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
- Record
GHSA-79jc-343r-49r6- Updated
- 2026-11-02
OSVNo score
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
- Record
CVE-2005-2353- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2353No score
run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.
- Record
DEBIAN-CVE-2005-2353- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdDebian:12 | before 1.5.0.2-1 | 1.5.0.2-1 |
thunderbirdDebian:13 | before 1.5.0.2-1 | 1.5.0.2-1 |
thunderbirdDebian:14 | before 1.5.0.2-1 | 1.5.0.2-1 |
mozillaDebian:3.1 From an advisory covering 31 CVEs | before 2:1.7.8-1sarge5, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge3 | 2:1.7.8-1sarge5 |
mozilla-thunderbirdDebian:3.1 From an advisory covering 28 CVEs | before 1.0.2-2.sarge1.0.8, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.7 | 1.0.2-2.sarge1.0.8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2353 is a low vulnerability (CVSS 2.1) in Mozilla Thunderbird, published August 5, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 22nd percentile. Fixed in thunderbird 1.5.0.2-1.