{"id":"CVE-2006-1045","url":"https://www.cyber-defence.io/tools/cve/CVE-2006-1045","generatedAt":"2026-10-27T18:33:34.967Z","title":"The HTML rendering engine in Mozilla Thunderbird 1.5, when \"Block loading of remote images in mail messages\" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive…","description":"The HTML rendering engine in Mozilla Thunderbird 1.5, when \"Block loading of remote images in mail messages\" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.","published":"2006-03-07T11:02:00.000Z","lastModified":"2026-06-16T22:21:55.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":2.6,"severity":"LOW","vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N"},"cwe":[],"affected":["mozilla/thunderbird"],"epss":{"score":0.04974,"percentile":0.92143,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2006-02-28","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":27337,"kind":"exploit","title":"Mozilla Thunderbird 1.5 - Multiple Remote Information Disclosure Vulnerabilities","url":"https://www.exploit-db.com/exploits/27337","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/27337.txt","file":"exploits/php/webapps/27337.txt","published":"2006-02-28","added":"2006-02-28","updated":"2013-08-05","author":"Crashfr","type":"webapps","platform":"php","port":null,"verified":true,"codes":["CVE-2006-1045","OSVDB-24681"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/16881/info"}]},"verdict":{"level":"high","text":"A public exploit is published in Exploit-DB (verified), so the technical barrier is gone even though the severity is low and EPSS is 5.0%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"http://secunia.com/advisories/19821","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19823","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19863","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19902","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19941","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19950","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20051","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22065","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/514","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1046","source":"cve@mitre.org"},{"url":"http://www.debian.org/security/2006/dsa-1051","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml","source":"cve@mitre.org"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml","source":"cve@mitre.org"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:078","source":"cve@mitre.org"},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-26.html","source":"cve@mitre.org"},{"url":"http://www.novell.com/linux/security/advisories/2006_04_25.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0330.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/426347","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/16881","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/17516","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/1356","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/3749","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24959","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975","source":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/276-1/","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/19821","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19823","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19863","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19902","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19941","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/19950","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/22065","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/514","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1046","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2006/dsa-1051","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:078","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-26.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.novell.com/linux/security/advisories/2006_04_25.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0330.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/426347","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/16881","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/17516","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/1356","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/3749","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24959","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/276-1/","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-1045","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}