CVEvulnerability

CVE-2005-0149

5.0 MEDIUM Published 2005-02-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-02-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.

Affected configurations

• mozilla mozilla 1.7 • mozilla mozilla 1.7.1 • mozilla mozilla 1.7.2 • mozilla mozilla 1.7.3 • mozilla thunderbird 0.6 • mozilla thunderbird 0.7 • mozilla thunderbird 0.7.1 • mozilla thunderbird 0.7.2 • mozilla thunderbird 0.7.3 • mozilla thunderbird 0.9

References