CVE-2006-1045: mozilla thunderbird
Vulnerability summary
CVE-2006-1045 is a low (CVSS 2.6) vulnerability in mozilla thunderbird. EPSS estimates a 4.97% chance of exploitation in the next 30 days, higher than 92.1% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 3Timeline
- 07-03-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.97%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
0.00 pp
From 4.97% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
Mozilla Thunderbird 1.5 - Multiple Remote Information Disclosure Vulnerabilities
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Debian1 product
- thunderbird< 1.5.0.2-1
Mozilla1 product
- thunderbird1.5
2 vendors · 2 products
References
28 links- www.mozilla.org/security/announce/2006/mfsa2006-26.htmlX Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254VDB EntrySignatureX Refsource OVAL
