Improper Input Validation Affecting thunderbird package, versions <1.5.0.2-1
Snyk CVSS
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIANUNSTABLE-THUNDERBIRD-420735
- published 24 Feb 2006
- disclosed 24 Feb 2006
Introduced: 24 Feb 2006
CVE-2006-0884 Open this link in a new tabHow to fix?
Upgrade Debian:unstable
thunderbird
to version 1.5.0.2-1 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream thunderbird
package and not the thunderbird
package as distributed by Debian
.
See How to fix?
for Debian:unstable
relevant fixed versions and status.
The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which is executed when the user edits the e-mail.
References
- ADVISORY
- BUGTRAQ
- CONFIRM
- Debian Security Advisory
- Debian Security Advisory
- FEDORA
- Gentoo Security Advisory
- Gentoo Security Advisory
- HP
- HP
- Mozilla Security Announcement
- Oval Security
- Oval Security
- SCO
- SECTRACK
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Secunia Advisory
- Security Focus
- SGI
- SUSE
- SUSE
- UBUNTU
- Ubuntu Security Advisory
- VUPEN
- X-force Vulnerability Report
- cve@mitre.org
- cve@mitre.org
- OSVDB
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org