2.6

CVE-2006-1045

Exploit

EPSS 10.4%
Veröffentlicht 07.03.2006 11:02:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 30

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Thunderbird Version1.5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	10.4%	0.929

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	2.6	4.9	2.9	AV:N/AC:H/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/19823

http://www.novell.com/linux/security/advisories/2006_04_25.html

http://secunia.com/advisories/19863

http://secunia.com/advisories/19941

http://www.debian.org/security/2006/dsa-1046

http://www.debian.org/security/2006/dsa-1051

http://secunia.com/advisories/19902

http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml

http://secunia.com/advisories/19821

http://secunia.com/advisories/19950

http://secunia.com/advisories/20051

http://secunia.com/advisories/22065

http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml

http://www.mandriva.com/security/advisories?name=MDKSA-2006:078

http://www.redhat.com/support/errata/RHSA-2006-0330.html

http://www.securityfocus.com/archive/1/446657/100/200/threaded

http://www.vupen.com/english/advisories/2006/3749

https://usn.ubuntu.com/276-1/

http://securityreason.com/securityalert/514

http://www.mozilla.org/security/announce/2006/mfsa2006-26.html

http://www.securityfocus.com/archive/1/426347

Exploit

http://www.securityfocus.com/bid/16881

http://www.securityfocus.com/bid/17516

http://www.vupen.com/english/advisories/2006/1356

https://exchange.xforce.ibmcloud.com/vulnerabilities/24959

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975

https://nvd.nist.gov/vuln/detail/CVE-2006-1045

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-1045

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-1045

EUVD