Lack of data validation In thunderbird
Description
Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which allows user-assisted remote attackers to cross zone restrictions and read arbitrary file:// URIs by convincing a user to show a blocked popup.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel5 | 0:0.12-10.0.1.el5 | ||
rpm rhel5 | 0:1.5.0.10-2.el5 | ||
rpm rhel5 | 0:1.5.0.10-1.el5 | ||
rpm rhel5 | 0:2.16.0-14.0.1.el5 |
Aliases
1. 2. 3.