FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-1045

This CVE name corresponds to:

Entered	Topic
2006-04-16	mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-1045 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-1045
Phase	Assigned(20060307)

Description

The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.

References

Source	Reference
BUGTRAQ	20060228 Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities
CONFIRM	http://www.mozilla.org/security/announce/2006/mfsa2006-26.html
DEBIAN	DSA-1046
DEBIAN	DSA-1051
GENTOO	GLSA-200604-18
GENTOO	GLSA-200605-09
HP	HPSBUX02156
HP	SSRT061236
MANDRIVA	MDKSA-2006:078
REDHAT	RHSA-2006:0330
SUSE	SUSE-SA:2006:022
SUSE	SUSE-SA:2006:004
UBUNTU	USN-276-1
BID	16881
BID	17516
OVAL	oval:org.mitre.oval:def:10254
VUPEN	ADV-2006-1356
VUPEN	ADV-2006-3749
OVAL	oval:org.mitre.oval:def:1975
SECUNIA	19821
SECUNIA	19823
SECUNIA	19863
SECUNIA	19902
SECUNIA	19950
SECUNIA	19941
SECUNIA	20051
SECUNIA	22065
SREASON	514
XF	thunderbird-inline-information-disclosure(24959)