Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS prefetching even when the app type is APP_TYPE_MAIL or APP_TYPE_EDITOR, which makes it easier for remote attackers to determine the network location of the application's user by logging DNS requests, as demonstrated by DNS requests triggered by reading text/plain e-mail messages in Thunderbird.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mozilla Thunderbird中DNS信息提取导致用户信息泄露漏洞
Vulnerability Description
在Thunderbird 3.0.1版本，SeaMonkey,以及其它应用程序中使用的Mozilla Necko，在应用程序类型是APP_TYPE_MAIL或APP_TYPE_EDITOR时,可以执行DNS事先提取,更易于远程攻击者借助登录DNS请求确定申请用户的网络位置，比如读取Thunderbird中的text/plain邮件信息引发的DNS请求。
CVSS Information
N/A
Vulnerability Type
N/A