Home > Vulnerability Database > CVE-2006-1045

Mend.io Vulnerability Database

CVE-2006-1045

Date: March 7, 2006

The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.

Severity Score

3.7

Related Resources (30)

Url: http://www.securityfocus.com/archive/1/446657/100/200/threaded

Url: http://securityreason.com/securityalert/514

Url: http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml

Url: http://secunia.com/advisories/19950

Url: http://www.mozilla.org/security/announce/2006/mfsa2006-26.html

Url: http://www.redhat.com/support/errata/RHSA-2006-0330.html

Url: http://www.novell.com/linux/security/advisories/2006_04_25.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2006-1045

Url: http://www.vupen.com/english/advisories/2006/3749

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2006:078

Url: http://www.debian.org/security/2006/dsa-1051

Url: http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml

Url: http://secunia.com/advisories/22065

Url: https://usn.ubuntu.com/276-1/

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/24959

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975

Url: http://www.securityfocus.com/bid/16881

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254

Url: http://www.securityfocus.com/archive/1/426347

Url: http://www.debian.org/security/2006/dsa-1046

Url: https://nvd.nist.gov/vuln/detail/CVE-2006-1045

Url: http://secunia.com/advisories/19902

Url: http://secunia.com/advisories/19823

Url: http://secunia.com/advisories/19941

Url: http://secunia.com/advisories/19821

Url: http://secunia.com/advisories/19863

Url: http://secunia.com/advisories/20051

Url: http://www.securityfocus.com/bid/17516

Url: http://www.vupen.com/english/advisories/2006/1356

Url: https://www.mend.io/vulnerability-database/CVE-2006-1045

Severity Score

3.7

CVSS v3.1

Base Score:	3.7
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	2.6
Access Vector (AV):	NETWORK
Access Complexity (AC):	HIGH
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2006-1045

Date: March 7, 2006

Severity Score

Related Resources (30)

Severity Score

CVSS v3.1

CVSS v2

Do you need more information?