CVE-2005-0149 Security feature bypass in n/a
Remote attackers can bypass privacy settings by using cookies in emails, requiring user interaction to view the message.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2005-0149?
CVE-2005-0149 is a medium-severity vulnerability in Mozilla Mozilla, published on 29 Jan 2005. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.
Which versions are affected by CVE-2005-0149?
It affects 2 products.
Products include Mozilla Mozilla, Mozilla Thunderbird.
How do I fix CVE-2005-0149?
Apply the vendor's patch.
Is CVE-2005-0149 being exploited?
There is no known exploitation of CVE-2005-0149 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Mozilla
Sources
Also known as GHSA-2x58-77jw-wgpw.