Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-4570

Fixed in a distro release EPSS 2%

Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.

Published 2006-09-15 · CVE record · OSV

Products: mozilla seamonkey, mozilla thunderbird

Distro releases

ReleasePackageFixed in
Debian 12thunderbird1.5.0.7-1
Debian 13thunderbird1.5.0.7-1
Debian 14thunderbird1.5.0.7-1
Debian 3.1mozilla2:1.7.8-1sarge7.3.1
Debian 3.1mozilla-thunderbird1.0.2-2.sarge1.0.8c.1
Red Hat Enterprise Linux 3seamonkey0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-chat0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-debuginfo0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-devel0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-dom-inspector0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-js-debugger0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-mail0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-nspr0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-nspr-devel0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-nss0:1.0.5-0.1.el3
Red Hat Enterprise Linux 3seamonkey-nss-devel0:1.0.5-0.1.el3
Red Hat Enterprise Linux 4devhelp0:0.10-0.4.el4
Red Hat Enterprise Linux 4devhelp-debuginfo0:0.10-0.4.el4
Red Hat Enterprise Linux 4devhelp-devel0:0.10-0.4.el4
Red Hat Enterprise Linux 4seamonkey0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-chat0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-debuginfo0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-devel0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-dom-inspector0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-js-debugger0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4seamonkey-mail0:1.0.5-0.1.el4
Red Hat Enterprise Linux 4thunderbird0:1.5.0.7-0.1.el4
Red Hat Enterprise Linux 4thunderbird-debuginfo0:1.5.0.7-0.1.el4