CVE-2006-1045

no score yetEPSS 5.0%

The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.

EPSS: 5.0% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
Published: 2006-03-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mozilla:thunderbird

References

http://secunia.com/advisories/19821
http://secunia.com/advisories/19823
http://secunia.com/advisories/19863
http://secunia.com/advisories/19902
http://secunia.com/advisories/19941

Check your stack JSON