CVE-2005-0149: Mozilla

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.

Affected products

• Mozilla Mozilla: version 1.7 only; version 1.7.1 only; version 1.7.2 only; version 1.7.3 only
• Mozilla Thunderbird: version 0.6 only; version 0.7 only; version 0.7.1 only; version 0.7.2 only; version 0.7.3 only; version 0.9 only

Published 2005-02-15. Last modified 2026-06-16.