CVE-2006-4570
EPSS 2.1%
Description
Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.
How to fix CVE-2006-4570
To remediate CVE-2006-4570, upgrade the affected package to a fixed version below.
- Debian/thunderbird—upgrade to 1.5.0.7-1 or later
Is CVE-2006-4570 being exploited?
Low — EPSS is 2.1%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 1.5.0.7-1