CVE-2006-1045

Mozilla Thunderbird 1.5 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1045. PoCs published by Crashfr.

AI-analyzed exploit summary This exploit demonstrates an information disclosure vulnerability in Mozilla Thunderbird 1.5 by using MIME multipart messages with embedded iframes or CSS to force the loading of remote content, bypassing user restrictions.

Description

The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Crashfr · textwebappsphp
https://www.exploit-db.com/exploits/27337

This exploit demonstrates an information disclosure vulnerability in Mozilla Thunderbird 1.5 by using MIME multipart messages with embedded iframes or CSS to force the loading of remote content, bypassing user restrictions.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Mozilla Thunderbird 1.5
No auth needed
Prerequisites: Victim must open the malicious email in Thunderbird 1.5
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (27)

Core 27
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0330.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19902
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/276-1/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19941
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1975
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19821
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10254
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19823
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1051
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3749
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1356
Third Party Advisory, VDB Entry vendor-advisory x_refsource_hp
http://www.securityfocus.com/archive/1/446657/100/200/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24959
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/514
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:078
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20051
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19863
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/16881
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17516
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2006_04_25.html
Exploit mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/426347
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22065
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19950
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1046

Scores

EPSS 0.0486
EPSS Percentile 90.9%

Details

Status published
Products (1)
mozilla/thunderbird 1.5
Published Mar 07, 2006
Tracked Since Feb 18, 2026