CVE-2006-4570

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-09-15 · updated 2026-06-16

Description

Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message.

Affected products

Mozilla Seamonkey: through 1.0.4
Mozilla Thunderbird: through 1.5.0.6

References

http://secunia.com/advisories/21915
http://secunia.com/advisories/21916
http://secunia.com/advisories/21939
http://secunia.com/advisories/21940
http://secunia.com/advisories/22036
http://secunia.com/advisories/22055
http://secunia.com/advisories/22056
http://secunia.com/advisories/22074
http://secunia.com/advisories/22088
http://secunia.com/advisories/22247
http://secunia.com/advisories/22274

Get alerted when CVE-2006-4570 or the next vulnerability affects your stack