PT-2006-2717 · Mozilla+1 · Firefox+3

Moz_Bug_R_A4

·

Publicado

2006-04-14

·

Atualizado

2018-10-18

·

CVE-2006-1725

CVSS v2.0

2.6

Baixa

VetorAV:N/AC:H/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 1.5 through 1.5.0.2 SeaMonkey versions prior to 1.0.1
Description: The issue is caused by an interaction between XUL content windows and the history mechanism, which might allow user-assisted remote attackers to trick users into executing arbitrary code by making certain windows become translucent.
Recommendations: For Mozilla Firefox versions 1.5 through 1.5.0.2, update to version 1.5.0.2 or later. For SeaMonkey versions prior to 1.0.1, update to version 1.0.1 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2006-1725
HPSBUX02153

Produtos afetados

Hp-Ux
Firefox
Seamonkey
Xul