PT-2004-3121 · Mozilla · Mail+1

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2226

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Mail versions 1.7.1 through 1.7.3 Thunderbird versions prior to 0.9

Description The issue allows remote attackers to determine valid e-mail addresses via an HTML e-mail that references a Cascading Style Sheets (CSS) document on the attacker's server, when HTML-Mails is enabled.

Recommendations For Mozilla Mail versions 1.7.1 through 1.7.3, consider disabling HTML e-mail functionality until a fix is available. For Thunderbird versions prior to 0.9, consider disabling HTML e-mail functionality until a fix is available.

Fix

Related Identifiers

CVE-2004-2226

Affected Products

Mail

Thunderbird

References · 5

• http://secunia.com/advisories/13086 · Vendor Advisory
• http://osvdb.org/11394 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-2226 · Security Note
• http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0070.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17949 · Note