PT-2010-1448 · Mozilla · Thunderbird+2

Karsten Düsterloh · Publicado 2010-01-29 · Atualizado 2010-02-02 · CVE-2009-4629

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Necko versions used in Thunderbird 3.0.1, SeaMonkey, and other applications

Description The issue allows remote attackers to determine the network location of the application's user by logging DNS requests. This is demonstrated by DNS requests triggered by reading text/plain e-mail messages in Thunderbird. The problem arises because Mozilla Necko performs DNS prefetching even when the application type is set for mail or editor.

Recommendations For Thunderbird 3.0.1, consider disabling DNS prefetching to prevent exploitation. For SeaMonkey, restrict DNS prefetching for mail and editor application types until a fix is available. As a temporary workaround, avoid reading suspicious text/plain e-mail messages in Thunderbird until the issue is resolved.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2009-4629

Produtos afetados

Necko

Seamonkey

Thunderbird

Referências · 3

• https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=492196 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4629 · Nota de Segurança