CVE catalog

CVE-2005-2706

mozilla-thunderbird - several

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.76% · Oct 25, 2026

Firefox before 1.0.7 and Mozilla before Suite 1.7.12 allows remote attackers to execute Javascript with chrome privileges via an about: page such as about:mozilla. security flaw

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmozilla-thunderbird3.11.0.2-2vulnerable
Debianmozilla-thunderbird3.11.0.2-2.sarge1.0.6vulnerable
Debianmozilla-thunderbird3.11.0.2-2.sarge1.0.7fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmozilla-thunderbirddeb3.11.0.2-2.sarge1.0.7Not reportedDSA-868-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References