NetSight
medium5.0

CVE-2005-0149

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attack…

Impact

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.

Affected products

VendorProductAffected versions
MozillaMozilla
Versions 1.7, 1.7.1, 1.7.2, 1.7.3
MozillaThunderbird
Versions 0.6, 0.7, 0.7.1, 0.7.2, 0.7.3, 0.9

References