Published: 15/02/2005 Updated: 11/10/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Thunderbird 0.6 up to and including 0.9 and Mozilla 1.7 up to and including 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote malicious users to bypass the user's intended privacy and security policy by using cookies in e-mail messages.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla mozilla 1.7
mozilla mozilla 1.7.2
mozilla mozilla 1.7.3
mozilla thunderbird 0.7.1
mozilla thunderbird 0.7.2
mozilla thunderbird 0.7.3
mozilla thunderbird 0.9
mozilla mozilla 1.7.1
mozilla thunderbird 0.6
mozilla thunderbird 0.7

Synopsis mozilla security update Type/Severity Security Advisory: Critical Topic Updated mozilla packages that fix various bugs are now availableThis update has been rated as having critical security impact by the RedHat Security Response Team Description Mozilla is an open source Web bro ...

Synopsis thunderbird security update Type/Severity Security Advisory: Moderate Topic An updated Thunderbird package that fixes a security issue is now availablefor Red Hat Enterprise Linux 4This update has been rated as having moderate security impact by the Red HatSecurity Response Team Descript ...

Synopsis mozilla security update Type/Severity Security Advisory: Critical Topic Updated mozilla packages that fix various bugs are now availableThis update has been rated as having critical security impact by the RedHat Security Response Team Description Mozilla is an open source Web bro ...

NVD-CWE-Other http://www.mozilla.org/security/announce/mfsa2005-11.html https://bugzilla.mozilla.org/show_bug.cgi?id=268107 http://www.redhat.com/support/errata/RHSA-2005-094.html http://www.redhat.com/support/errata/RHSA-2005-323.html http://www.redhat.com/support/errata/RHSA-2005-335.html http://secunia.com/advisories/19823 http://www.securityfocus.com/bid/12407 http://www.novell.com/linux/security/advisories/2006_04_25.html https://exchange.xforce.ibmcloud.com/vulnerabilities/19172 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2005:323

CVE-2005-0149

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect