The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled, does not properly block external images from inline HTML attachments, which could allow remote attackers to obtain sensitive information, such as application version or IP address, when the user reads the email and the external image is accessed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade thunderbird | Jul 30, 2024 | Mar 7, 2006 |
| Freebsd | — | Upgrade thunderbirdUpgrade linux-mozillaUpgrade linux-seamonkeyUpgrade linux-firefoxUpgrade firefoxUpgrade mozilla-thunderbirdUpgrade seamonkeyUpgrade linux-mozilla-develUpgrade mozilla | Dec 10, 2025 | Apr 16, 2006 |
| Gentoo Linux | — | Upgrade www-client/mozilla-bin.Upgrade mail-client/mozilla-thunderbird-bin.Upgrade mail-client/mozilla-thunderbird.Upgrade www-client/mozilla. | Oct 30, 2017 | Mar 7, 2006 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 1.5.0.2Upgrade to Mozilla Thunderbird version 1.0.8 | Nov 21, 2013 | Mar 7, 2006 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub