mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the (1) .documentURI or (2) .textContent DOM properties.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2009-08-13 09:30
Updated : 2018-10-30 09:25
NVD link : CVE-2008-6961
Mitre link : CVE-2008-6961
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
mozilla
- seamonkey
- thunderbird