PT-2004-3121 · Mozilla · Mail+1

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2226

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Mail versions 1.7.1 through 1.7.3 Thunderbird versions prior to 0.9

Description The issue allows remote attackers to determine valid e-mail addresses via an HTML e-mail that references a Cascading Style Sheets (CSS) document on the attacker's server, when HTML-Mails is enabled.

Recommendations For Mozilla Mail versions 1.7.1 through 1.7.3, consider disabling HTML e-mail functionality until a fix is available. For Thunderbird versions prior to 0.9, consider disabling HTML e-mail functionality until a fix is available.

Correção

Identificadores relacionados

CVE-2004-2226

Produtos afetados

Mail

Thunderbird

Referências · 5

• http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0070.html · Nota
• http://secunia.com/advisories/13086 · Aviso do Fabricante
• http://osvdb.org/11394 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2004-2226 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17949 · Nota