oval:org.mitre.oval:def:2024

Definition Id: oval:org.mitre.oval:def:2024

Oval ID:	oval:org.mitre.oval:def:2024
Title:	Mozilla JavaScript Execution in Mail When Forwarding In-line
Description:	The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which is executed when the user edits the e-mail.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2006-0884	Version:	5
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003	Product(s):	mozilla
Definition Synopsis:
Mozilla Thunderbird version 1.0.7 or earlier is installed Mozilla Thunderbird version 1.0.7 or earlier is installed AND Mozilla Thunderbird version 1.0.7 or earlier is installed OR Mozilla Thunderbird version 1.5 is installed and has NOT been patched with version 1.5.0.2 Thunderbird version 1.5 or earlier is installed AND Mozilla Thunderbird version 1.5 is installed AND NOT The version of thunderbird.exe is greater than or equal to 1.8.20060.30803 (v1.5.0.2) OR SeaMonkey version 1.0 or earlier is installed SeaMonkey version 1.0 or earlier is installed AND SeaMonkey version 1.0 or earlier is installed OR Mozilla Suite version 1.7.12 or earlier is installed Mozilla Suite version 1.7.12 or earlier is installed AND Mozilla Suite version 1.7.12 or earlier is installed