5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
79.4%
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the
network.cookie.disableCookieForMailNews preference, which could allow
remote attackers to bypass the user’s intended privacy and security policy
by using cookies in e-mail messages.