Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Mozilla Thunderbird and SeaMonkey 'mailnews' Information Disclosure Vulnerability

Mozilla Thunderbird and SeaMonkey are prone to an information-disclosure vulnerability because they allow JavaScript to access certain DOM properties.

An attacker can exploit the issue to obtain sensitive 'mailnews' information such as the computer account name. Information harvested may aid in further attacks.

Versions prior to Mozilla Thunderbird 2.0.0.18 and SeaMonkey 1.1.13 are vulnerable.







 

Privacy Statement
Copyright 2008, SecurityFocus