Home

CVE-2006-4570

Description

Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with Load Images enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.

Risk Information

Base Score
5.4
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
EPSS Score
Exploitation Probability
1.294

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Mozilla Thunderbird 1.5.0.6Windows
Multiple vulnerabilities affected in SeaMonkey 1.0.4Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 1.5.0.5Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-315938Mozilla Thunderbird (68.12.0)
PATCH-341197SeaMonkey (2.53.19)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234