Mozilla Thunderbird: remote code execution and DoS [LWN.net]

Package(s):

mozilla-thunderbird

CVE #(s):

CVE-2006-0884

Created:

March 3, 2006

Updated:

May 4, 2006

Description:

The WYSIWYG rendering engine in Mozilla Thunderbird 1.0.7 and earlier allows user-complicit attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which is executed when the user edits the e-mail.

Alerts:

Debian	DSA-1051-1	2006-05-04
Mandriva	MDKSA-2006:052	2006-03-02

(Log in to post comments)

Mozilla Thunderbird: remote code execution and DoS

Posted May 11, 2006 7:29 UTC (Thu) by mjcox@redhat.com (subscriber, #31775) [Link]

Red Hat 2006-04-21
https://rhn.redhat.com/errata/RHSA-2006-0330.html