CVE-2006-4570

Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.

🔗 References (64)

• secalert@redhatftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc
• secalert@redhathttp://secunia.com/advisories/21915
• secalert@redhathttp://secunia.com/advisories/21916
• secalert@redhathttp://secunia.com/advisories/21939
• secalert@redhathttp://secunia.com/advisories/21940
• secalert@redhathttp://secunia.com/advisories/22036
• secalert@redhathttp://secunia.com/advisories/22055
• secalert@redhathttp://secunia.com/advisories/22056
• secalert@redhathttp://secunia.com/advisories/22074
• secalert@redhathttp://secunia.com/advisories/22088
• secalert@redhathttp://secunia.com/advisories/22247
• secalert@redhathttp://secunia.com/advisories/22274
• secalert@redhathttp://secunia.com/advisories/22299
• secalert@redhathttp://secunia.com/advisories/22342
• secalert@redhathttp://secunia.com/advisories/22391