NetSight
IP …
medium6.8

CVE-2006-6503

Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site s…

Impact

Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.

Affected products

VendorProductAffected versions
MozillaFirefox
from 1.5 before 1.5.0.9
from 2.0 before 2.0.0.1
MozillaSeamonkey
before 1.0.7
MozillaThunderbird
before 1.5.0.9
DebianDebian Linux
Versions 3.1, 4.0
CanonicalUbuntu Linux
Versions 5.10, 6.06, 6.10

Weakness classification

CWE-254

References