{"schemaVersion":3,"id":"CVE-2006-1045","aliases":["DEBIAN-CVE-2006-1045"],"status":"published","duplicateOf":null,"title":null,"description":"The HTML rendering engine in Mozilla Thunderbird 1.5, when \"Block loading of remote images in mail messages\" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.","dates":{"published":"2006-03-07T11:00:00.000Z","modified":"2024-08-07T16:56:15.532Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":2.6,"severity":"low","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":2.6,"severity":"low","vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04974,"percentile":0.92113,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.04974},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04974,"percentile":0.92113}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04974,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.04974,"percentile":0.92113}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_3EB568BB77B2482F","name":"Exploit Reference (securityfocus.com)","source":"reference","url":"http://www.securityfocus.com/archive/1/426347","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"27337","name":"Mozilla Thunderbird 1.5 - Multiple Remote Information Disclosure Vulnerabilities","source":"exploit-database","url":"https://www.exploit-db.com/exploits/27337","maturity":"poc","reliabilityScore":0.8,"verified":true,"type":null,"platforms":["php"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"webapps","platform":"php","file":"exploits/php/webapps/27337.txt","codes":["CVE-2006-1045","OSVDB-24681"]},"metasploit":null}],"exploitCount":2,"weaknesses":[],"affected":[{"vendor":"debian","product":"thunderbird","name":"thunderbird","label":"thunderbird","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/thunderbird","purlType":"deb","versions":[{"text":"< 1.5.0.2-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.0.2-1","eol":null,"hubHref":null},{"vendor":"mozilla","product":"thunderbird","name":"Thunderbird","label":"thunderbird","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.5","eol":null,"hubHref":"/vendor/mozilla/thunderbird"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.mozilla.org/security/announce/2006/mfsa2006-26.html","label":"www.mozilla.org/security/announce/2006/mfsa2006-26.html","hostname":"www.mozilla.org","tags":["X Refsource CONFIRM"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0330.html","label":"www.redhat.com/support/errata/RHSA-2006-0330.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/19902","label":"secunia.com/advisories/19902","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://usn.ubuntu.com/276-1/","label":"usn.ubuntu.com/276-1/","hostname":"usn.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://secunia.com/advisories/19941","label":"secunia.com/advisories/19941","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://secunia.com/advisories/19821","label":"secunia.com/advisories/19821","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://secunia.com/advisories/19823","label":"secunia.com/advisories/19823","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.debian.org/security/2006/dsa-1051","label":"www.debian.org/security/2006/dsa-1051","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.vupen.com/english/advisories/2006/3749","label":"www.vupen.com/english/advisories/2006/3749","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml","label":"www.gentoo.org/security/en/glsa/glsa-200604-18.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.vupen.com/english/advisories/2006/1356","label":"www.vupen.com/english/advisories/2006/1356","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.securityfocus.com/archive/1/446657/100/200/threaded","label":"www.securityfocus.com/archive/1/446657/100/200/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource HP"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24959","label":"exchange.xforce.ibmcloud.com/vulnerabilities/24959","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://securityreason.com/securityalert/514","label":"securityreason.com/securityalert/514","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:078","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:078","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/20051","label":"secunia.com/advisories/20051","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19863","label":"secunia.com/advisories/19863","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.securityfocus.com/bid/16881","label":"www.securityfocus.com/bid/16881","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.securityfocus.com/bid/17516","label":"www.securityfocus.com/bid/17516","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.novell.com/linux/security/advisories/2006_04_25.html","label":"www.novell.com/linux/security/advisories/2006_04_25.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://www.securityfocus.com/archive/1/426347","label":"www.securityfocus.com/archive/1/426347","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Exploit"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml","label":"www.gentoo.org/security/en/glsa/glsa-200605-09.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://secunia.com/advisories/22065","label":"secunia.com/advisories/22065","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/19950","label":"secunia.com/advisories/19950","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.debian.org/security/2006/dsa-1046","label":"www.debian.org/security/2006/dsa-1046","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2006-1045","label":"security-tracker.debian.org/tracker/CVE-2006-1045","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-1046-1","DSA-1051-1","RHSA-2006:0330"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2006-03-07T11:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T16:56:15.532Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T06:17:17.179Z","stale":false,"partial":false}}