265296 - Preview message dials up internet connection automatically

Status: RESOLVED DUPLICATE of bug 28327

(Thunderbird :: General, defect)

Description

[Kevin Millican]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10

I have received an email message that causes Thunderbird to automatically dial
my default dialup connection when it is previewed. This happens even though
remote images are blocked.

It even occurs when I am already connected to the internet (!)

Reproducible: Always
Steps to Reproduce:
1. Click on the message header to preview it
2. Move away
3. Return to step 1

Actual Results:  
Dials the default dialup connection everytime

Expected Results:  
NOT tried to access anything remotely or cause the dialup !

I saved the email and zipped it and placed it at :-
http://www.millican.info/files/mobileshop-autodial.zip

This seems to be a serious security flaw

Comment 1

[Kevin Millican]

Attachment: Zipped Email

This is the email that causes the autodial behaviour

Comment 2

[Ben Bucksch (:BenB)]

*** This bug has been marked as a duplicate of 28327 ***

Comment 3

[Daniel Veditz [:dveditz]]

This should be fixed in the latest nightly of Thunderbird. For the record it
looks like it was probably trying to load the stylesheet (which had a
webbug-like URL).

Comment 4

[Kevin Millican]

(In reply to comment #3)
> This should be fixed in the latest nightly of Thunderbird. For the record it
> looks like it was probably trying to load the stylesheet (which had a
> webbug-like URL).

Why does it cause my default modem dialup to start connecting even though I am
already connected to the internet by WiFi or GPRS ?