259539 - junk-filter is skipping on certain messages, message status read although never opened

Status: RESOLVED DUPLICATE of bug 196749

(MailNews Core :: Database, defect)

Description

[Marten Lehmann]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.3) Gecko/20040910

I'm sometimes receiving phishing mails from "citibank". I'm wondering about one
thing: This messages aren't marked as junk and as soon as they come in, they are
marked "read" although I never touched them and thus they should be unread. I
guess that something is wrong with mozilla's parsing of message headers. This
messages contain the following headers:

X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000

It seems that mozilla is treating them as if mozilla set them on it's own. But
this way, an external email-sender can trick the behaviour of mozilla.

Reproducible: Always
Steps to Reproduce:
1. Send the attached mail to our email-account and download it with mozilla 1.7.3
2. It won't be detected as junk and will be marked as "read" although it's unread.


Expected Results:  
No message should be able to trick mozilla and change it's expected behaviour on
filters and message-status.

Comment 1

[Marten Lehmann]

Attachment: a phishing mail from "citibank", that causes the described behaviour

Comment 2

[Mike Cowperthwaite]

*** This bug has been marked as a duplicate of 196749 ***