VulnerabilityModified
CVE-2005-0149
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail…
MEDIUM 5.0EPSS 1.68%
Does this matter?
Lower severity and a low EPSS score (1.68%). Track it; it rarely justifies an emergency change on its own.
Description
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 1.68% probability · 76th percentile
- CISA KEV
- Not listed
- Affected
- mozilla/mozilla · mozilla/thunderbird
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/19823
- http://www.mozilla.org/security/announce/mfsa2005-11.htmlPatch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2006_04_25.html
- http://www.redhat.com/support/errata/RHSA-2005-094.htmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-323.htmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-335.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/12407
- https://bugzilla.mozilla.org/show_bug.cgi?id=268107Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19172
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407
- http://secunia.com/advisories/19823
- http://www.mozilla.org/security/announce/mfsa2005-11.htmlPatch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2006_04_25.html
- http://www.redhat.com/support/errata/RHSA-2005-094.htmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-323.htmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2005-335.htmlPatch, Vendor Advisory
- http://www.securityfocus.com/bid/12407
- https://bugzilla.mozilla.org/show_bug.cgi?id=268107Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19172
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.