Lucene search

K
prionPRIOn knowledge basePRION:CVE-2006-1045
HistoryMar 07, 2006 - 11:02 a.m.

Design/Logic Flaw

2006-03-0711:02:00
PRIOn knowledge base
www.prio-n.com
2

6.3 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.03 Low

EPSS

Percentile

90.6%

The HTML rendering engine in Mozilla Thunderbird 1.5, when “Block loading of remote images in mail messages” is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.

CPENameOperatorVersion
thunderbirdeq1.5

References

6.3 Medium

AI Score

Confidence

Low

2.6 Low

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.03 Low

EPSS

Percentile

90.6%