CVE-2005-0148 Other in n/a

What is CVE-2005-0148?

CVE-2005-0148 is a medium-severity vulnerability in Mozilla Thunderbird, published on 29 Jan 2005. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Thunderbird before 0.9, when running on Windows systems, uses the default handler when processing javascript: links, which invokes Internet Explorer and may expose the Thunderbird user to vulnerabilities in the version of Internet Explorer that is installed on the user's system. NOTE: since the invocation between multiple products is a common practice, and the vulnerabilities inherent in multi-product interactions are not easily enumerable, this issue might be REJECTED in the future.

Which versions are affected by CVE-2005-0148?

It affects 1 product.

Products include Mozilla Thunderbird.

How do I fix CVE-2005-0148?

No fix has been published for CVE-2005-0148 yet. Limit exposure of the affected software until one is available.

Is CVE-2005-0148 being exploited?

There is no known exploitation of CVE-2005-0148 in the wild and no public exploit code.

Other vulnerabilities in Mozilla Thunderbird

• CVE-2026-92238 Ambiguous parsing of mail headers Critical 9.8
• CVE-2026-84637 Calendar invitation attachments could launch local executables Critical 9.8
• CVE-2021-43529 Memory corruption in Thunderbird Critical 9.8
• CVE-2019-11703 Memory corruption in Thunderbird Critical 9.8
• CVE-2019-11704 Memory corruption in Thunderbird Critical 9.8

All Mozilla Thunderbird vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6wgp-m8wf-9325.