Vulnerability · NVD

CVE-2006-0884

CVE-2006-0884, Severity pending severity (CVSS —): 1 tracked app concerned, all fixed or indeterminable on their current version.

Severity (CVSS): -
Exploitation: 7.2 %
Tracked apps: 1
Still exposed: 0

Public exploit : ExploitDB Published on 2006-02-24

The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass javascript security settings and obtain sensitive information or cause a crash via an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which is executed when the user edits the e-mail.

EPSS 7.23% above median percentile 94.1%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Mozilla Thunderbird Windows winget:Mozilla.Thunderbird

Affected ≤1.0.7 Fixed in > 1.0.7 Latest tracked 156.0.1 patched

Vulnerable CPE configurations (18)

Vendor	Product	Platform	Versions	CPE 2.3 URI
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	≤1.0.7	cpe:2.3:a:mozilla:thunderbird::::::::
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.4:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.6:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.7:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.8:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:0.9:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:1.0:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::*
mozilla	thunderbird All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::*

View on NVD ↗ Advisory · secunia.com Advisory · www.mozilla.org Advisory · www.vupen.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM