CVE-2004-2226: Medium severity Mozilla Thunderbird vulnerability
Mozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows remote attackers to determine valid e-mail addresses via an HTML e-mail that references a Cascading Style Sheets (CSS) document on the attacker's server.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2226?
CVE-2004-2226 is considered a medium severity vulnerability due to its potential for email address enumeration.
How do I fix CVE-2004-2226?
To fix CVE-2004-2226, upgrade to a version of Mozilla Thunderbird that is newer than 0.9, as earlier versions are vulnerable.
Which versions are affected by CVE-2004-2226?
CVE-2004-2226 affects Mozilla Thunderbird versions 0.8 and versions 1.7.1 and 1.7.3.
What type of attack does CVE-2004-2226 enable?
CVE-2004-2226 enables remote attackers to enumerate valid email addresses through crafted HTML emails.
Is CVE-2004-2226 still a risk today?
CVE-2004-2226 is less of a risk today as it affects obsolete versions of email clients, but using outdated software always poses security risks.