CVE-2006-1725

Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1 causes certain windows to become translucent due to an interaction between XUL content windows and the history mechanism, which might allow user-assisted remote attackers to trick users into executing arbitrary code.

CVSS v2.0 2.6 LOW

2.6^/10

CVSS v2.0 : LOW

Vector : AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability : 4.9 / Impact : 2.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=327014	Exploit Issue Tracking Vendor Advisory
http://www.securityfocus.com/bid/17516	Third Party Advisory VDB Entry
http://secunia.com/advisories/19631	Third Party Advisory
http://secunia.com/advisories/19649	Third Party Advisory Vendor Advisory
http://secunia.com/advisories/22066	Third Party Advisory
http://www.vupen.com/english/advisories/2006/1356	Permissions Required Third Party Advisory
http://www.vupen.com/english/advisories/2008/0083	Permissions Required Third Party Advisory
http://www.vupen.com/english/advisories/2006/3748	Permissions Required Third Party Advisory
http://www.mozilla.org/security/announce/2006/mfsa2006-29.html	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25827	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1471	Third Party Advisory
http://www.securityfocus.com/archive/1/446658/100/200/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mozilla:firefox::::::::
	cpe:2.3:a:mozilla:seamonkey::::::::

Information

Published : 2006-04-14 03:02

Updated : 2018-10-18 09:34

NVD link : CVE-2006-1725

Mitre link : CVE-2006-1725

JSON object : View

CWE

CWE-264

Permissions, Privileges, and Access Controls

Advertisement

Products Affected

mozilla

firefox
seamonkey

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=327014", "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=327014", "tags": ["Exploit", "Issue Tracking", "Vendor Advisory"], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/17516", "name": "17516", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BID"}, {"url": "http://secunia.com/advisories/19631", "name": "19631", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/19649", "name": "19649", "tags": ["Third Party Advisory", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://secunia.com/advisories/22066", "name": "22066", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.vupen.com/english/advisories/2006/1356", "name": "ADV-2006-1356", "tags": ["Permissions Required", "Third Party Advisory"], "refsource": "VUPEN"}, {"url": "http://www.vupen.com/english/advisories/2008/0083", "name": "ADV-2008-0083", "tags": ["Permissions Required", "Third Party Advisory"], "refsource": "VUPEN"}, {"url": "http://www.vupen.com/english/advisories/2006/3748", "name": "ADV-2006-3748", "tags": ["Permissions Required", "Third Party Advisory"], "refsource": "VUPEN"}, {"url": "http://www.mozilla.org/security/announce/2006/mfsa2006-29.html", "name": "http://www.mozilla.org/security/announce/2006/mfsa2006-29.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25827", "name": "mozilla-xul-window-spoofing(25827)", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "XF"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1471", "name": "oval:org.mitre.oval:def:1471", "tags": ["Third Party Advisory"], "refsource": "OVAL"}, {"url": "http://www.securityfocus.com/archive/1/446658/100/200/threaded", "name": "SSRT061181", "tags": [], "refsource": "HP"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1 causes certain windows to become translucent due to an interaction between XUL content windows and the history mechanism, which might allow user-assisted remote attackers to trick users into executing arbitrary code."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-264"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-1725", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 2.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "LOW", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2006-04-14T10:02Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "1.5.0.2", "versionStartIncluding": "1.5"}, {"cpe23Uri": "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "1.0.1"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-18T16:34Z"}