Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.redhat.com/support/errata/RHSA-2005-323.html | vendor-advisory x_refsource_REDHAT |
| http://www.securityfocus.com/bid/12407 | vdb-entry x_refsource_BID |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047 | vdb-entry signature x_refsource_OVAL |
| http://www.redhat.com/support/errata/RHSA-2005-335.html | vendor-advisory x_refsource_REDHAT |
| http://secunia.com/advisories/19823 | third-party-advisory x_refsource_SECUNIA |
| http://www.mozilla.org/security/announce/mfsa2005-11.html | x_refsource_CONFIRM |
| https://bugzilla.mozilla.org/show_bug.cgi?id=268107 | x_refsource_CONFIRM |
| http://www.redhat.com/support/errata/RHSA-2005-094.html | vendor-advisory x_refsource_REDHAT |
| https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407 | vdb-entry signature x_refsource_OVAL |
| http://www.novell.com/linux/security/advisories/2006_04_25.html | vendor-advisory x_refsource_SUSE |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/19172 | vdb-entry x_refsource_XF |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|