264828 - Remote IFRAMES in html-coded email are loaded

Status: RESOLVED DUPLICATE of bug 28327

(Thunderbird :: General, defect)

Description

[Joel Peshkin]

Running GFI Software's email vulnerability tests, both Thunderbird 0.8 and
Mozilla 1.7.3 will load and attempt to open an IFRAME in an html-coded email. 
In both cases, image loading was disabled.

------=_NextPart_000_001D_01C1FC09.DE06D720
Content-Type:  text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit

<IFRAME src="http://www.gfisoftware.com/emailsecuritytest/exploit/sf.plx" 
width=0 height=0> </IFRAME>

Comment 1

[Daniel Veditz [:dveditz]]

No need for confidentiality, the bad guys know this one already.

This was supposed to be fixed, but it appears the fix only worked in thunderbird.

*** This bug has been marked as a duplicate of 28327 ***