Description
Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/22391 ↗
- http://www.redhat.com/support/errata/RHSA-2006-0676.html ↗
- http://secunia.com/advisories/22055 ↗
- http://www.mozilla.org/security/announce/2006/mfsa2006-63.html ↗
- http://www.ubuntu.com/usn/usn-361-1 ↗
- http://www.ubuntu.com/usn/usn-352-1 ↗
- http://securitytracker.com/id?1016867 ↗
- http://secunia.com/advisories/22056 ↗
- http://secunia.com/advisories/22247 ↗
- http://www.us.debian.org/security/2006/dsa-1191 ↗
- http://security.gentoo.org/glsa/glsa-200610-04.xml ↗
- http://securitytracker.com/id?1016866 ↗
- http://secunia.com/advisories/21939 ↗
- http://secunia.com/advisories/21915 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10892 ↗
- http://www.redhat.com/support/errata/RHSA-2006-0677.html ↗
- http://www.debian.org/security/2006/dsa-1192 ↗
- http://secunia.com/advisories/22274 ↗
- http://secunia.com/advisories/21940 ↗
- http://www.securityfocus.com/bid/20042 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28962 ↗
- http://www.ubuntu.com/usn/usn-350-1 ↗
- http://secunia.com/advisories/22342 ↗
- http://security.gentoo.org/glsa/glsa-200610-01.xml ↗
- http://secunia.com/advisories/22074 ↗
- http://secunia.com/advisories/22088 ↗
- http://www.novell.com/linux/security/advisories/2006_54_mozilla.html ↗
- http://secunia.com/advisories/22036 ↗
- http://secunia.com/advisories/22299 ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:169 ↗
- http://secunia.com/advisories/21916 ↗