CVE-2005-0148: Medium severity Mozilla Thunderbird vulnerability

Published Jan 29, 2005

Updated

Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabilities in the version of Internet Explorer that is installed on the user's system. NOTE: since the invocation between multiple products is a common practice, and the vulnerabilities inherent in multi-product interactions are not easily enumerable, this issue might be REJECTED in the future.

Affected Software

3 affected components

Mozilla Thunderbird=0.6

Mozilla Thunderbird=0.7

Mozilla Thunderbird=0.8

Event History

Jan 29, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

May 2, 2005

Rejected

04:00 AM

Frequently Asked Questions

What is the severity of CVE-2005-0148?

CVE-2005-0148 is considered a moderate severity vulnerability due to the potential exposure to security issues in Internet Explorer.

How do I fix CVE-2005-0148?

To mitigate CVE-2005-0148, users should upgrade Thunderbird to version 0.9 or later.

Which versions of Thunderbird are affected by CVE-2005-0148?

CVE-2005-0148 affects Thunderbird versions 0.6, 0.7, and 0.8.

How does CVE-2005-0148 exploit vulnerabilities in Internet Explorer?

CVE-2005-0148 exploits vulnerabilities by using the default handler for javascript: links, which opens Internet Explorer.

What platforms are impacted by CVE-2005-0148?

CVE-2005-0148 specifically impacts Thunderbird users running on Windows systems.