PT-2006-1373 · Mozilla · Firefox+2

Brendan + 1 · Publicado 2006-02-02 · Atualizado 2018-10-19 · CVE-2006-0299

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 1.5.0.1 Thunderbird version 1.5 SeaMonkey versions prior to 1.0

Description The E4X implementation exposes the internal AnyName object to external interfaces, allowing multiple cooperating domains to exchange information in violation of the same origin restrictions.

Recommendations For Mozilla Firefox versions prior to 1.5.0.1, update to version 1.5.0.1 or later. For Thunderbird version 1.5, consider disabling Javascript in mail as a temporary workaround until a patch is available. For SeaMonkey versions prior to 1.0, update to version 1.0 or later.

Correção

Identificadores relacionados

CVE-2006-0299

Produtos afetados

Firefox

Seamonkey

Thunderbird

Referências · 16

• http://securityfocus.com/bid/16476 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1625 · Nota
• http://vupen.com/english/advisories/2006/0413 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0299 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24437 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=322312 · Nota
• http://securityfocus.com/archive/1/446657/100/200/threaded · Aviso do Fabricante
• http://mozilla.org/security/announce/2006/mfsa2006-08.html · Nota
• https://security-tracker.debian.org/tracker/CVE-2006-0299 · Aviso do Fabricante
• http://secunia.com/advisories/22065 · Nota
• http://secunia.com/advisories/18704 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-0299 · Aviso do Fabricante
• http://securitytracker.com/id?1015570 · Nota
• http://vupen.com/english/advisories/2006/3749 · Nota
• http://secunia.com/advisories/18700 · Nota