Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2006-1045 | First vendor Publication | 2006-03-07 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 2.6 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | High |
| Cvss Expoit Score | 4.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1045 |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:10254 | |||
| Oval ID: | oval:org.mitre.oval:def:10254 | ||
| Title: | The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed. | ||
| Description: | The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed. | ||
| Family: | unix | Class: | vulnerability |
| Reference(s): | CVE-2006-1045 | Version: | 5 |
| Platform(s): | Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 | Product(s): | |
| Definition Synopsis: | |||
| Definition Id: oval:org.mitre.oval:def:1975 | |||
| Oval ID: | oval:org.mitre.oval:def:1975 | ||
| Title: | Mozilla Mail Multiple Information Disclosure | ||
| Description: | The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2006-1045 | Version: | 5 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 | Product(s): | mozilla |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-05-05 | Name : HP-UX Update for Thunderbird HPSBUX02156 File : nvt/gb_hp_ux_HPSBUX02156.nasl |
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200604-18 (mozilla) File : nvt/glsa_200604_18.nasl |
| 2008-09-24 | Name : Gentoo Security Advisory GLSA 200605-09 (mozilla-thunderbird) File : nvt/glsa_200605_09.nasl |
| 2008-09-04 | Name : FreeBSD Ports: firefox File : nvt/freebsd_firefox22.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 1046-1 (mozilla) File : nvt/deb_1046_1.nasl |
| 2008-01-17 | Name : Debian Security Advisory DSA 1051-1 (mozilla-thunderbird) File : nvt/deb_1051_1.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 24681 | Mozilla Thunderbird Remote Image Block Bypass |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2007-01-17 | Name : The remote Fedora Core host is missing a security update. File : fedora_2006-489.nasl - Type : ACT_GATHER_INFO |
| 2007-01-17 | Name : The remote Fedora Core host is missing a security update. File : fedora_2006-490.nasl - Type : ACT_GATHER_INFO |
| 2006-10-14 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1046.nasl - Type : ACT_GATHER_INFO |
| 2006-10-14 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-1051.nasl - Type : ACT_GATHER_INFO |
| 2006-07-05 | Name : The remote CentOS host is missing a security update. File : centos_RHSA-2006-0330.nasl - Type : ACT_GATHER_INFO |
| 2006-05-13 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_84630f4acd8c11dab7b9000c6ec775d9.nasl - Type : ACT_GATHER_INFO |
| 2006-05-13 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200605-09.nasl - Type : ACT_GATHER_INFO |
| 2006-05-03 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200604-18.nasl - Type : ACT_GATHER_INFO |
| 2006-05-03 | Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-276-1.nasl - Type : ACT_GATHER_INFO |
| 2006-04-26 | Name : The remote Mandrake Linux host is missing one or more security updates. File : mandrake_MDKSA-2006-078.nasl - Type : ACT_GATHER_INFO |
| 2006-04-26 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2006-0330.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:20:58 |
|
| 2024-11-28 12:08:25 |
|
| 2024-08-02 12:04:10 |
|
| 2024-08-02 01:01:52 |
|
| 2024-02-02 01:03:53 |
|
| 2024-02-01 12:01:52 |
|
| 2023-09-05 12:03:38 |
|
| 2023-09-05 01:01:43 |
|
| 2023-09-02 12:03:42 |
|
| 2023-09-02 01:01:43 |
|
| 2023-08-12 12:04:18 |
|
| 2023-08-12 01:01:44 |
|
| 2023-08-11 12:03:46 |
|
| 2023-08-11 01:01:46 |
|
| 2023-08-06 12:03:33 |
|
| 2023-08-06 01:01:44 |
|
| 2023-08-04 12:03:37 |
|
| 2023-08-04 01:01:46 |
|
| 2023-07-14 12:03:36 |
|
| 2023-07-14 01:01:46 |
|
| 2023-03-29 01:03:50 |
|
| 2023-03-28 12:01:50 |
|
| 2022-10-11 12:03:12 |
|
| 2022-10-11 01:01:37 |
|
| 2021-05-04 12:03:45 |
|
| 2021-04-22 01:04:18 |
|
| 2020-05-23 00:17:28 |
|
| 2019-06-25 12:01:22 |
|
| 2019-03-18 12:01:15 |
|
| 2018-10-18 21:20:00 |
|
| 2018-10-04 00:19:27 |
|
| 2017-10-11 09:23:38 |
|
| 2017-07-20 09:23:24 |
|
| 2016-04-26 14:22:10 |
|
| 2014-02-17 10:34:54 |
|
| 2013-05-11 10:50:49 |
|
