CVE-2006-5877: Enigmail

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cause a denial of service (crash), as demonstrated with Mozilla Thunderbird.

Affected products

• Enigmail Enigmail: up to and including 0.92.0

Published 2007-02-23. Last modified 2026-06-16.