Description
Mozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows remote attackers to determine valid e-mail addresses via an HTML e-mail that references a Cascading Style Sheets (CSS) document on the attacker's server.
References
- 11394 vdb-entry
- mozilla-css-obtain-emails(17949) vdb-entry
- 20041102 CSS in E-Mails possible E-Mail-Validity Check for Spammers? mailing-list
- 13086 third-party-advisory