Skip to content

CVE-2005-2353

run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite...

2.1 LowFix available

CVE-2005-2353 is a low vulnerability (CVSS 2.1) in Mozilla Thunderbird, published August 5, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. Fixed in thunderbird 1.5.0.2-1.

run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.

Exploit likelihood

0.29%Down 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 2.1

run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.

Record: CVE-2005-2353
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated: 2026-11-02

CVE List No score

run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.

Record: CVE-2005-2353
Updated: 2026-11-02

EUVDEUVD-2005-2354 No score

run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.

Record: EUVD-2005-2354
Updated: 2026-11-03

GitHub AdvisoriesGHSA-79jc-343r-49r6 No score

run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite...

run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.

Record: GHSA-79jc-343r-49r6
Updated: 2026-11-02

OSV No score

run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.

Record: CVE-2005-2353
Updated: 2026-11-02

OSVDEBIAN-CVE-2005-2353 No score

run-mozilla.sh in Thunderbird, with debugging enabled, allows local users to create or overwrite arbitrary files via a symlink attack on temporary files.

Record: DEBIAN-CVE-2005-2353
Updated: 2026-11-02

Affected products

mozilla thunderbird

Affected packages

Affected packages
Package	Affected	Fixed
`thunderbird` Debian:12	before 1.5.0.2-1	1.5.0.2-1
`thunderbird` Debian:13	before 1.5.0.2-1	1.5.0.2-1
`thunderbird` Debian:14	before 1.5.0.2-1	1.5.0.2-1
`mozilla` Debian:3.1	before 2:1.7.8-1sarge5, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge3	2:1.7.8-1sarge5
`mozilla-thunderbird` Debian:3.1	before 1.0.2-2.sarge1.0.8, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.7	1.0.2-2.sarge1.0.8

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 5 moreShow less