QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-0884

Back to search

CVE-2006-0884

Published: Feb 24, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which is executed when the user edits the e-mail.

VendorProductVersions

n/a

n/a

affected
n/a

References

RHSA-2006:0330
vendor-advisory
x_refsource_REDHAT
oval:org.mitre.oval:def:2024
vdb-entry
signature
x_refsource_OVAL
19902
third-party-advisory
x_refsource_SECUNIA
USN-276-1
vendor-advisory
x_refsource_UBUNTU
HPSBUX02122
vendor-advisory
x_refsource_HP
1015665
vdb-entry
x_refsource_SECTRACK
19941
third-party-advisory
x_refsource_SECUNIA
19821
third-party-advisory
x_refsource_SECUNIA
MDKSA-2006:052
vendor-advisory
x_refsource_MANDRIVA
21622
third-party-advisory
x_refsource_SECUNIA
19823
third-party-advisory
x_refsource_SECUNIA
DSA-1051
vendor-advisory
x_refsource_DEBIAN
ADV-2006-3749
vdb-entry
x_refsource_VUPEN
RHSA-2006:0329
vendor-advisory
x_refsource_REDHAT
GLSA-200604-18
vendor-advisory
x_refsource_GENTOO
19811
third-party-advisory
x_refsource_SECUNIA
21033
third-party-advisory
x_refsource_SECUNIA
102550
vendor-advisory
x_refsource_SUNALERT
23653
vdb-entry
x_refsource_OSVDB
oval:org.mitre.oval:def:10782
vdb-entry
signature
x_refsource_OVAL
SUSE-SA:2006:021
vendor-advisory
x_refsource_SUSE
SSRT061236
vendor-advisory
x_refsource_HP
SSRT061158
vendor-advisory
x_refsource_HP
MDKSA-2006:078
vendor-advisory
x_refsource_MANDRIVA
20051
third-party-advisory
x_refsource_SECUNIA
19863
third-party-advisory
x_refsource_SECUNIA
HPSBUX02156
vendor-advisory
x_refsource_HP
16770
vdb-entry
x_refsource_BID
FLSA:189137-1
vendor-advisory
x_refsource_FEDORA
228526
vendor-advisory
x_refsource_SUNALERT
19721
third-party-advisory
x_refsource_SECUNIA
SUSE-SA:2006:022
vendor-advisory
x_refsource_SUSE
GLSA-200605-09
vendor-advisory
x_refsource_GENTOO
22065
third-party-advisory
x_refsource_SECUNIA
19950
third-party-advisory
x_refsource_SECUNIA
MDKSA-2006:076
vendor-advisory
x_refsource_MANDRIVA
DSA-1046
vendor-advisory
x_refsource_DEBIAN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now