mailnews in Mozilla Thunderbird prior to 2.0.0.18 and SeaMonkey prior to 1.1.13, when JavaScript is enabled in mail, allows remote malicious users to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the (1) .documentURI or (2) .textContent DOM properties.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
mozilla thunderbird 2.0.0.5 |
||
mozilla thunderbird 2.0.0.6 |
||
mozilla thunderbird 2.0.0.15 |
||
mozilla thunderbird 1.7.3 |
||
mozilla thunderbird 1.7.1 |
||
mozilla thunderbird 1.5.0.5 |
||
mozilla thunderbird 1.5.0.4 |
||
mozilla thunderbird 1.5.0.10 |
||
mozilla thunderbird 1.5.0.1 |
||
mozilla thunderbird 2.0.0.7 |
||
mozilla thunderbird 2.0.0.8 |
||
mozilla thunderbird 2.0.0.13 |
||
mozilla thunderbird 2.0.0.12 |
||
mozilla thunderbird 1.5 |
||
mozilla thunderbird 1.5.2 |
||
mozilla thunderbird 1.5.0.3 |
||
mozilla thunderbird 1.5.0.2 |
||
mozilla thunderbird 1.0.8 |
||
mozilla thunderbird 1.0.1 |
||
mozilla thunderbird 1.0 |
||
mozilla thunderbird 0.5 |
||
mozilla thunderbird 0.4 |
||
mozilla seamonkey 1.1.1 |
||
mozilla seamonkey 1.1 |
||
mozilla seamonkey 1.0.8 |
||
mozilla seamonkey 1.0.7 |
||
mozilla seamonkey 1.0.6 |
||
mozilla seamonkey |
||
mozilla thunderbird 2.0.0.9 |
||
mozilla thunderbird 2.0.0.14 |
||
mozilla thunderbird 2.0.0.11 |
||
mozilla thunderbird 2.0.0.1 |
||
mozilla thunderbird 1.5.1 |
||
mozilla thunderbird 1.5.0.9 |
||
mozilla thunderbird 1.0.3 |
||
mozilla thunderbird 1.0.2 |
||
mozilla thunderbird 0.7 |
||
mozilla thunderbird 0.6 |
||
mozilla seamonkey 1.1.11 |
||
mozilla seamonkey 1.1.10 |
||
mozilla seamonkey 1.0.99 |
||
mozilla seamonkey 1.0.9 |
||
mozilla seamonkey 1.0.1 |
||
mozilla seamonkey 1.0 |
||
mozilla thunderbird 1.5.0.8 |
||
mozilla thunderbird 1.5.0.14 |
||
mozilla thunderbird 1.5.0.13 |
||
mozilla thunderbird 1.0.7 |
||
mozilla thunderbird 1.0.5 |
||
mozilla thunderbird 0.9 |
||
mozilla thunderbird 0.8 |
||
mozilla thunderbird 0.7.3 |
||
mozilla thunderbird 0.3 |
||
mozilla thunderbird 0.2 |
||
mozilla seamonkey 1.0.5 |
||
mozilla seamonkey 1.0.4 |
||
mozilla thunderbird 2.0.0.3 |
||
mozilla thunderbird 2.0.0.4 |
||
mozilla thunderbird 2.0.0.2 |
||
mozilla thunderbird 2.0.0.16 |
||
mozilla thunderbird 2.0.0.0 |
||
mozilla thunderbird 2.0 |
||
mozilla thunderbird 1.5.0.7 |
||
mozilla thunderbird 1.5.0.6 |
||
mozilla thunderbird 1.5.0.12 |
||
mozilla thunderbird 1.5.0.11 |
||
mozilla thunderbird 1.0.4 |
||
mozilla thunderbird 0.7.2 |
||
mozilla thunderbird 0.7.1 |
||
mozilla thunderbird 0.1 |
||
mozilla thunderbird |
||
mozilla seamonkey 1.0.3 |
||
mozilla seamonkey 1.0.2 |
Vulmon