CVE-2006-4570 Affecting thunderbird package, versions <1.5.0.7-1
Snyk CVSS
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIAN11-THUNDERBIRD-517645
- published 15 Sep 2006
- disclosed 15 Sep 2006
Introduced: 15 Sep 2006
CVE-2006-4570 Open this link in a new tabHow to fix?
Upgrade Debian:11
thunderbird
to version 1.5.0.7-1 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream thunderbird
package and not the thunderbird
package as distributed by Debian
.
See How to fix?
for Debian:11
relevant fixed versions and status.
Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.
References
- ADVISORY
- Debian Security Advisory
- ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
- Gentoo Security Advisory
- Gentoo Security Advisory
- http://securitytracker.com/id?1016866
- http://securitytracker.com/id?1016867
- http://www.novell.com/linux/security/advisories/2006_54_mozilla.html
- http://www.us.debian.org/security/2006/dsa-1191
- Mozilla Security Announcement
- Oval Security
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Security Focus
- Ubuntu Security Advisory
- Ubuntu Security Advisory
- Ubuntu Security Advisory
- X-force Vulnerability Report
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com