CVE-2010-0161

Name	CVE-2010-0161
Description	The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via crafted data in a session that uses SSPI.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version
iceape	source	(unstable)	(not affected)
iceweasel	source	(unstable)	(not affected)
xulrunner	source	(unstable)	(not affected)

Notes

- xulrunner <not-affected> (Windows-specific)
- iceape <not-affected> (Windows-specific)
- iceweasel <not-affected> (Windows-specific)