CVE-2006-0884

Name of the Vulnerable Software and Affected Versions Mozilla Thunderbird versions 1.0.7 and earlier

Description The issue allows attackers to bypass javascript security settings and obtain sensitive information or cause a crash. This is achieved through an e-mail containing a javascript URI in the SRC attribute of an IFRAME tag, which is executed when the user edits the e-mail.

Recommendations For Mozilla Thunderbird versions 1.0.7 and earlier, consider disabling the WYSIWYG rendering engine or restricting the use of javascript in e-mails to minimize the risk of exploitation.