high7.5
CVE-2006-2775
Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote a…
Impact
Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | through 1.5.0.3 Versions 0.8, 0.9, 0.9.1, 0.9.2, 0.9.3 |
| Mozilla | Thunderbird | through 1.5.0.1 Versions 0.1, 0.2, 0.3, 0.4, 0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20376
- http://secunia.com/advisories/20382
- http://secunia.com/advisories/20561
- http://secunia.com/advisories/20709
- http://secunia.com/advisories/21176
- http://secunia.com/advisories/21178
- http://secunia.com/advisories/21183
- http://secunia.com/advisories/21188
- http://secunia.com/advisories/21210
- http://secunia.com/advisories/21324
- http://secunia.com/advisories/21532
- http://secunia.com/advisories/21607
- http://secunia.com/advisories/22065
- http://secunia.com/advisories/22066
- http://securitytracker.com/id?1016202
- http://securitytracker.com/id?1016214
- http://www.debian.org/security/2006/dsa-1118
- http://www.debian.org/security/2006/dsa-1120
- http://www.debian.org/security/2006/dsa-1134
- http://www.gentoo.org/security/en/glsa/glsa-200606-12.xml
- http://www.gentoo.org/security/en/glsa/glsa-200606-21.xml
- http://www.kb.cert.org/vuls/id/243153
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:145
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:146