Lucene search

K
mozillaMozilla FoundationMFSA2010-23
HistoryMar 30, 2010 - 12:00 a.m.

Image src redirect to mailto: URL opens email editor — Mozilla

2010-03-3000:00:00
Mozilla Foundation
www.mozilla.org
22

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.298 Low

EPSS

Percentile

96.9%

phpBB developer Henry Sudhof reported that when an image tag points to a resource that redirects to a mailto: URL, the external mail handler application is launched. This issue poses no security threat to users but could create an annoyance when browsing a site that allows users to post arbitrary images.

CPENameOperatorVersion
firefoxlt3.5.9
firefoxlt3.6.2
seamonkeylt2.0.4

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.298 Low

EPSS

Percentile

96.9%