mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the (1) .documentURI or (2) .textContent DOM properties.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2009-08-13 16:30
Updated : 2024-02-04 17:33
NVD link : CVE-2008-6961
Mitre link : CVE-2008-6961
CVE.ORG link : CVE-2008-6961
JSON object : View
Products Affected
mozilla
- seamonkey
- thunderbird
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor