NVD

Id
59768  
Name
CVE-2006-1045  
Description
The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-03-07  
Modified Date
2011-03-07  
Seq
2006-1045  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
307398 59768 CVE-2006-1045 oval:org.mitre.oval:def:10254  View
307399 59768 CVE-2006-1045 oval:org.mitre.oval:def:1975  View
307400 59768 CVE-2006-1045 514  View
307401 59768 CVE-2006-1045 DSA-1046  View
307402 59768 CVE-2006-1045 DSA-1051  View
307403 59768 CVE-2006-1045 GLSA-200604-18  View
307404 59768 CVE-2006-1045 GLSA-200605-09  View
307405 59768 CVE-2006-1045 MDKSA-2006:078  View
307406 59768 CVE-2006-1045 http://www.mozilla.org/security/announce/2006/mfsa2006-26.html  View
307407 59768 CVE-2006-1045 SUSE-SA:2006:004  View
307408 59768 CVE-2006-1045 RHSA-2006:0330  View
307409 59768 CVE-2006-1045 20060228 Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities  View
307410 59768 CVE-2006-1045 SSRT061236  View
307411 59768 CVE-2006-1045 16881  View
307412 59768 CVE-2006-1045 17516  View
307413 59768 CVE-2006-1045 USN-276-1  View
307414 59768 CVE-2006-1045 ADV-2006-1356  View
307415 59768 CVE-2006-1045 ADV-2006-3749  View
307416 59768 CVE-2006-1045 thunderbird-inline-information-disclosure(24959)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58011 JVNDB-2006-000207 Thunderbird の HTML レンダリングエンジンにおける情報漏洩の脆弱性 Thunderbird の HTML のレンダリングエンジンには、MIME マルチパートメッセージの処理に不備があり、リモートコンテンツを参照する CSS や iframe を含む HTML ファイルが添付され、HTML メールの本文より参照された場合に、上記の制限が回避されてしまう脆弱性が存在します。 CVE-2006-1045 17147 CVE-2006-1045 59768 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000207.html 2006-04-13 2007-04-01 View