CVE-2006-1045
Last modified
CVE-2006-1045 is a vulnerability of currently unknown severity. The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.. EPSS estimates a 4.86% chance of exploitation in the next 30 days.
Description
The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Thunderbird | 1.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-1045?
How severe is CVE-2006-1045?
How do I fix CVE-2006-1045?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-1039SAP Web Application Server (WebAS) Kernel before 7.0 allows …
- CVE-2006-1040Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12…
- CVE-2006-1041Multiple cross-site scripting (XSS) vulnerabilities in Grega…
- CVE-2006-1042Multiple SQL injection vulnerabilities in Gregarius 0.5.2 al…
- CVE-2006-1043Stack-based buffer overflow in Microsoft Visual Studio 6.0 a…
- CVE-2006-1044Multiple buffer overflows in LISTSERV 14.3 and 14.4, includi…
- CVE-2006-1046server.cpp in Monopd 0.9.3 allows remote attackers to cause …
- CVE-2006-1047Unspecified vulnerability in the "Remember Me login function…
- CVE-2006-1048Joomla! 1.0.7 and earlier allows attackers to bypass intende…
- CVE-2006-1049Multiple SQL injection vulnerabilities in the Admin function…
- CVE-2006-1050Kwik-Pay Payroll 4.2.20, and possibly other versions, stores…
- CVE-2006-1051SQL injection vulnerability in Akarru Social BookMarking Eng…
Are you affected by CVE-2006-1045?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST